Skip to content

Latest commit

 

History

History
76 lines (54 loc) · 2.5 KB

README.md

File metadata and controls

76 lines (54 loc) · 2.5 KB
Raw

External-istiod

Install Istio with an External Control Plane

  1. Create 2 clusters, external cluster will host gateway and external-istiod and remote cluster will host workloads.
export CTX_EXTERNAL_CLUSTER=<your external cluster context>
export CTX_REMOTE_CLUSTER=<your remote cluster context>
export CTX_REMOTE_CLUSTER=<remote cluster name>
  1. Point kube-config file to api server of external clusters and create gateway in external cluster.This will install ingress gateway and istiod pod in istio-system pod. this istiod pilot pod will configure ingress-gateway.
kubectl config use-context $CTX_EXTERNAL_CLUSTER
istioctl install -f controlplane-gateway.yaml
  1. Expose istio ingress gateway of external cluster, This will be used by remote cluster to access istiod.
➜  external-istiod git:(main) kubectl get svc  istio-ingressgateway -n istio-system

NAME                   TYPE           CLUSTER-IP    EXTERNAL-IP      PORT(S)                                           AGE
istio-ingressgateway   LoadBalancer   10.36.12.60   34.136.193.103   15021:32584/TCP,15012:32618/TCP,15017:32015/TCP   3h48m

export EXTERNAL_ISTIOD_ADDR=<hostname for istio-ingressgateway LB IP>
  1. Configure remote cluster
kubectl config use-context $CTX_REMOTE_CLUSTER
kubectl create namespace external-istiod
#Configure remote-config-cluster.yaml with the EXTERNAL_ISTIOD_ADDR variable.
istioctl manifest generate -f remote-config-cluster.yaml | kubectl apply -f -
kubectl get mutatingwebhookconfiguration
  1. Install external istio control-plane on external cluster.
kubectl config use-context $CTX_EXTERNAL_CLUSTER
kubectl create namespace external-istiod
istioctl x create-remote-secret \
  --context="${CTX_REMOTE_CLUSTER}" \
  --type=config \
  --namespace=external-istiod \
  --service-account=istiod \
  --create-service-account=false | \
kubectl apply -f - 
# Configure external-istiod.yaml with EXTERNAL_ISTIOD_ADDR variable.
istioctl manifest generate -f external-istiod.yaml | kubectl apply -f -
kubectl get po -n external-istiod 
kubectl apply -f istiodgw.yaml
  1. Deploy httpbin and sleep application
kubectl config use-context $CTX_REMOTE_CLUSTER
kubectl create  namespace sample
kubectl label  namespace sample istio-injection=enabled
kubectl apply -f samples/helloworld/helloworld.yaml -l service=helloworld -n sample 
kubectl apply -f samples/helloworld/helloworld.yaml -l version=v1 -n sample 
kubectl apply -f samples/sleep/sleep.yaml -n sample 
kubectl get pod -n sample