salrashid123’s gists

salrashid123 / istio_doc_destination.bas

Created February 6, 2018 15:24

istio_doc_destination

	$ istioctl create -f destination-rule.yaml

	$ kubectl get po,deployments,svc,ing
	NAME READY STATUS RESTARTS AGE
	po/be-v1-16151855-r8hn1 2/2 Running 0 29s
	po/be-v2-4191276971-6j9q3 2/2 Running 0 28s
	po/myapp-v1-2518991625-h521p 2/2 Running 0 29s
	NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE
	deploy/be-v1 1 1 1 1 29s
	deploy/be-v2 1 1 1 1 29s

salrashid123 / istio_destination_round_robin.yaml

Created February 6, 2018 15:25

istio_destination_round_robin

	apiVersion: config.istio.io/v1alpha2
	kind: DestinationPolicy
	metadata:
	name: be-lb-policy
	namespace: default
	spec:
	source:
	name: myapp
	destination:
	name: be

salrashid123 / istio-destination.out.bas

Created February 6, 2018 15:26

istio-destination.out

	$ for i in {1..1000}; do curl -k https://$GATEWAY_IP/hostz; done

	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v2-4191276971-6j9q3] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v2-4191276971-6j9q3] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v2-4191276971-6j9q3] node: [gke-cluster-

salrashid123 / istio_destination_random.bas

Created February 6, 2018 15:26

istio_destination_random

	$ for i in {1..1000}; do curl -k https://$GATEWAY_IP/hostz; done

	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v2-4191276971-6j9q3] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v2-4191276971-6j9q3] node: [gke-cluster-1-default-pool-94718a04-lrb5]","statusCode":200}]
	[{"url":"http://be.default.svc.cluster.local:8080/backend","body":"pod: [be-v1-16151855-r8hn1] node: [gke-cluster-1-

salrashid123 / istio_doc_egress.bas

Created February 6, 2018 15:27

istio_doc_egress

	apiVersion: config.istio.io/v1alpha2
	kind: EgressRule
	metadata:
	name: allow-googleapis-egress-rule
	spec:
	destination:
	service: www.bbc.com
	ports:
	- port: 443
	protocol: https

salrashid123 / istio_egress_deny.json

Created February 6, 2018 15:28

istio_egress_deny

	[
	{
	"url": "http:\/\/www.cnn.com:443\/",
	"statusCode": {
	"name": "RequestError",
	"message": "Error: read ECONNRESET",
	{
	"url": "http:\/\/www.bbc.com:443\/robots.txt",
	"statusCode": {
	"name": "RequestError",

salrashid123 / istio_egress_allow.json

Created February 6, 2018 15:29

istio_egress_allow

	[
	{
	"url": "http:\/\/www.cnn.com:443\/",
	"body": "",
	"statusCode": 404
	},
	{
	"url": "http:\/\/www.bbc.com:443\/robots.txt",
	"statusCode": 200
	},

salrashid123 / istio_install

Last active May 28, 2018 03:32

istio060 install


	wget https://github.com/istio/istio/releases/download/0.7.0/istio-0.7.0-linux.tar.gz

	tar xvf istio-0.7.0-linux.tar.gz
	cd istio-0.7.0/

	kubectl create -f install/kubernetes/istio.yaml


	./install/kubernetes/webhook-create-signed-cert.sh \

salrashid123 / download_certs.bs

Last active March 11, 2019 22:57

webhook_1

	curl -s https://raw.githubusercontent.com/salrashid123/k8s_webook_helloworld/master/authn.yaml \
	-o /var/lib/localkube/authn.yaml

	curl -s https://raw.githubusercontent.com/salrashid123/k8s_webook_helloworld/master/authz.yaml \
	-o /var/lib/localkube/authz.yaml

	curl -s https://raw.githubusercontent.com/salrashid123/k8s_webook_helloworld/master/CA/GAE_CA.pem \
	-o /var/lib/localkube/certs/webhook_ca.crt

	curl -s https://raw.githubusercontent.com/salrashid123/k8s_webook_helloworld/master/CA/webhook_plugin.crt \

salrashid123 / authn.yaml

Last active March 31, 2018 20:57

authn.yaml

	clusters:
	- name: my-authn-service
	cluster:
	certificate-authority: /var/lib/localkube/certs/webhook_ca.crt
	server: https://1-dot-webhook-dot-YOUR_PROJECT.appspot.com/authenticate
	users:
	- name: my-api-server
	user:
	client-certificate: /var/lib/localkube/certs/webhook_plugin.crt
	client-key: /var/lib/localkube/certs/webhook_plugin.key