Create the Network Loadbalance and specific the annotations 1name: "istio-ingressgateway" 2 service: 3 # type: ClusterIP 4 annotations: 5 service.beta.kubernetes.io/aws-load-balancer-name: "istio-ingress-gateway" 6 service.beta.kubernetes.io/aws-load-balancer-ssl-cert: >- 7 …

read more

Create RequestAuthentication and AuthorizationPolicy resources 1apiVersion: security.istio.io/v1beta1 2kind: RequestAuthentication 3metadata: 4 name: "request-authentication-sso" 5 namespace: istio-system 6spec: 7 jwtRules: 8 - issuer: "https://issue.example.com/sso" 9 jwksUri: …

read more

Simple diagram for istio ingress gateway to access argo ui argo.dev.local —-> istio-ingressgateway —-> argo server virtual service —-> argo distination rule —-> argo kubernetes service Use the shell script generate the CA root certificate and csr for sub domain add the certificate …

read more

Sometimes intercept external access traffic in mesh to internal service is needed Http to Internal service when access external domain in mesh network when access http://edition.cnn.com in mesh network then should redirect to hello.test-ns.svc.cluster.local internal service. Create a ServiceEntry resource to defination …

read more

Installation and Configuration istio use terraform Pull helm chats to local 1# add istio helm chat repo url 2helm repo add istio https://istio-release.storage.googleapis.com/charts 3# download latest helm chat packages 4helm pull istio/base 5helm pull istio/istiod 6helm pull istio/gateway 7 8# uncompress to relative …

read more