[chore]: add istio service mesh in ambient mode

Author: Itsfoss0

0x5-service_mesh/deploy-demo-app.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+# deploy sample application and add it to mes
+# with istio
+
+kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.28/samples/bookinfo/platform/kube/bookinfo.yaml
+kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.28/samples/bookinfo/platform/kube/bookinfo-versions.yaml
+kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.28/samples/bookinfo/gateway-api/bookinfo-gateway.yaml
+kubectl annotate gateway bookinfo-gateway networking.istio.io/service-type=ClusterIP --namespace=default
+kubectl label namespace default istio.io/dataplane-mode=ambient
+kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.28/samples/addons/prometheus.yaml
+kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.28/samples/addons/kiali.yaml
+
+kubectl port-forward svc/bookinfo-gateway-istio 8080:80

0x5-service_mesh/deployment.yaml

@@ -0,0 +1,71 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hello-dep-v1
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: hello
+      version: v1
+  template:
+    metadata:
+      labels:
+        app: hello
+        version: v1
+    spec:
+      containers:
+        - name: seedimage
+          image: akhonya/kube-hello:v1
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: hello-svc-v1
+spec:
+  type: ClusterIP
+  selector:
+    app: hello
+    version: v1
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 8080
+
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hello-dep-v2
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: hello
+      version: v2
+  template:
+    metadata:
+      labels:
+        app: hello
+        version: v2
+    spec:
+      containers:
+        - name: seedimage
+          image: akhonya/kube-hello:v2
+
+--- 
+apiVersion: v1
+kind: Service
+metadata:
+  name: hello-svc-v2
+spec:
+  type: ClusterIP
+  selector:
+    app: hello
+    version: v2
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 8080

0x5-service_mesh/gateway.yaml

@@ -0,0 +1,34 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: hello-gateway
+spec:
+  gatewayClassName: istio
+  listeners:
+    - name: http
+      port: 80
+      protocol: HTTP
+      allowedRoutes:
+        namespaces:
+          from: Same
+
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: hello
+spec:
+  parentRefs:
+  - name: hello-gateway
+  rules:
+  - matches:
+    - path:
+        type: Exact
+        value: /
+    backendRefs:
+    - name: hello-svc-v1
+      port: 80
+      weight: 75
+    - name: hello-svc-v2
+      port: 80
+      weight: 25

0x5-service_mesh/kube-hello/Dockerfile

@@ -0,0 +1,14 @@
+
+FROM node:lts-alpine3.21
+
+WORKDIR /app
+
+COPY package*.json ./
+
+RUN npm install
+
+COPY . .
+
+EXPOSE 8080
+
+CMD ["node", "index.js"]

0x5-service_mesh/kube-hello/README.md

@@ -0,0 +1,9 @@
+### Hello for UH DevOps with Docker
+
+HTTP GET /
+
+mluukkai/hello:1 responds with "Hello, World!"
+
+mluukkai/hello:2 responds with "Hello, New World!"
+
+https://hub.docker.com/repository/docker/mluukkai/hello/tags

0x5-service_mesh/kube-hello/index.js

@@ -0,0 +1,14 @@
+const express = require('express');
+
+const app = express();
+const port = 8080;
+
+app.get('/', (req, res) => {
+  // akhonya/kube-hello:v1 responds with "Hello, World!"
+  // akhonya/kube-hello:v2  responds with "Hello, Brave New World!"
+  res.send('Hello, Brave New World!'); 
+});
+
+app.listen(port, () => {
+  console.log(`Server is running at http://localhost:${port}`);
+});

0x5-service_mesh/kube-hello/package.json

@@ -0,0 +1,5 @@
+{
+  "dependencies": {
+    "express": "^5.1.0"
+  }
+}

0x5-service_mesh/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - "deployment.yaml"
+  - "gateway.yaml"

0x5-service_mesh/resource-quota.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: gcp-critical-pods
+  namespace: istio-system
+spec:
+  hard:
+    pods: 1000
+  scopeSelector:
+    matchExpressions:
+    - operator: In
+      scopeName: PriorityClass
+      values:
+      - system-node-critical

0x5-service_mesh/setup.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# install istio ambient mode in the cluster
+
+if  ! command -v istioctl; then 
+  echo "istioctl is not installed"
+  exit 1
+fi
+
+istioctl install --set profile=ambient --set values.global.platform=gke
+