shpwrck

My tests and test files

Content:

• scale-test.sh
• glooResources.yaml
• appResources.yaml

Notes:

• hardcoded cluster names (mgmt,worker-1,worker-2)
• replicas set to 0 by default

shpwrck

Config required to scale and secure Istio for production

*note: working document, may not apply to all installations/architectures

Cert Management

Manage Certificates with Cert-Manager

Benefit:

shpwrck

Demonstration of Failover Priority with Istio Multicluster

Sample Environment

• Four Clusters: {alvin,simon,theodore,dave}
• Ingress Gateway
• East-West Gateway
• Istiod
• Istio Echo Application

shpwrck

Datadog & Gloo Mesh Options

Option 1 - Leverage Envoy/Istio Integrations

Explanation

Datadog offers integrations at a lower price point, but with preselected metrics and dashboards.

Sample Configs

shpwrck

##################################################################################################
# Echo Frontend
##################################################################################################
apiVersion: v1
kind: Service
metadata:
  name: frontend
  labels:
    app: frontend
    service: frontend

shpwrck

static_resources:
  listeners:
  - address:
      socket_address:
        address: 0.0.0.0
        port_value: 8080
    filter_chains:
    - filters:
      - name: envoy.filters.network.http_connection_manager
        typed_config:

shpwrck

name: Build Video
on: push

jobs:
  create-cluster:
    runs-on: self-hosted
    steps:
      - name: Checkout Contents
        uses: actions/checkout@v2
      - name: Create Kind Cluster

shpwrck

export RANCHER_SERVER_URL=<< insert server url here >>
export RANCHER_ACCESS_KEY=<< insert access key here >>
export RANCHER_SECRET_KEY=<< insert secret key here >>
export RANCHER_LOCAL_CONTEXT=<< insert local cluster context here >>

function get-kubeconfigs () {
    # Authenticate to Rancher Server
    rancher login $RANCHER_SERVER_URL --token $RANCHER_ACCESS_KEY:$RANCHER_SECRET_KEY --context $RANCHER_LOCAL_CONTEXT
    # Delete previous configs (only if Rancher is your primary Kubernetes interface)
    rm -rf ~/.kube/*

shpwrck

#cloud-config

# Add additional users or set the password/ssh keys for root
users:
- name: "rancher"
  passwd: "rancher"
  groups: "users"
  ssh_authorized_keys:
  - ssh-rsa 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 jskrz@DESKTOP-H9LS01S

shpwrck

Ambassador CRDs

# GENERATED FILE: edits made by hand will not be preserved.
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.4.1