You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/blog/a-guide-to-enable-managed-istio-service-mesh-in-a-kubernetes-cluster-on-hpe-greenlake-for-private-cloud-enterprise.md
+29-31Lines changed: 29 additions & 31 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: A guide to enable managed Istio service mesh in a Kubernetes cluster on
3
-
HPE GreenLake for Private Cloud Enterprise
2
+
title: A guide to enabling a managed Istio service mesh in a Kubernetes cluster
In this blog post, we demonstrate how an end user can deploy a containerized application or a managed service on a Kubernetes-based container stack using the cluster add-on feature provided by **HPE GreenLake for Private Cloud Enterprise: Containers** and then access it over an external network or internet. The containers service evaluates the user’s environment and makes add-ons available to the user so that they can add the containerized application or managed service to the cluster as required.
24
24
25
-
**HPE GreenLake for Private Cloud Enterprise: Containers: Enabling Istio service mesh add-on from a cluster**
26
-
27
-
**Service mesh** is a network of microservices that consists of distributed applications and communications between those applications. It is a dedicated infrastructure layer that facilitates service-to-service communications routed through the proxy, ensuring secure communication.
25
+
For those of you who may be unfamiliar with the term, a **Service mesh** is a network of microservices that consist of distributed applications and communications between those applications. It is a dedicated infrastructure layer that facilitates service-to-service communications routed through the proxy, ensuring secure communication.
28
26
29
27
**Istio** is an open-source service mesh that provides a platform for distributed applications that includes API integrations with logging, telemetry, or policy systems. It provides a uniform and more efficient way to secure, connect, and monitor services. Istio automatically manages load balancing for HTTP, gRPC, WebSocket, and TCP traffic. For details, see **[The Istio service mesh](https://istio.io/latest/about/service-mesh/)**.
30
28
31
-
**Step-1: Create a Kubernetes cluster from containers page**
29
+
# **Enabling Istio service mesh add-on from a cluster**
30
+
31
+
### **Step-1: Create a Kubernetes cluster from the containers page**
32
32
33
33
To create a cluster, you must have been assigned the roles of **Private Cloud Cluster Owner** and **Private Cloud Widget Viewer**.
34
34
@@ -37,19 +37,19 @@ To create a cluster, you must have been assigned the roles of **Private Cloud Cl
37
37
38
38
![](/img/clustermainpage-2.png"Clusters view")
39
39
40
-
As indicated above, there are multiple clusters deployed in parallel for multiple purposes. For the **Istio** service mesh add-on enablement/deployment in our example, we will use created cluster with the name '**hpe**'.
40
+
As indicated above, there are multiple clusters deployed in parallel for multiple purposes. For the **Istio** service mesh add-on enablement/deployment in our example, we are using a cluster created with the name "**hpe**".
41
41
42
42
![](/img/clusterhpeview.png"Cluster 'hpe' view")
43
43
44
-
**Step-2: Enabling an add-on from a cluster**
44
+
### **Step-2: Enabling an add-on from a cluster**
45
45
46
46
* On the **Containers** main page, click a cluster row to open the cluster details screen.
47
47
* On the cluster details screen, click the **Add-ons** tab.
48
-
* Click **Enable Add-on** if no add-ons are enabled or click **Enable Another Add-on**.
48
+
* Click **Enable add-on** if no add-ons are enabled or click **Enable another add-on**.
49
49
50
50
![](/img/blankaddonpage.png"Add-ons view")
51
51
52
-
* In the **Enable Add-on** wizard, select the **Istio-service-mesh** add-on and click Next.
52
+
* In the **Enable Addon** wizard, select the **Istio-service-mesh** add-on and click **Next**.
**Step-3: Launching the Kiali - the console for Istio service mesh**
68
+
### **Step-3: Launching the Kiali dashboard - the console for Istio service mesh**
69
69
70
-
**Kiali** is an open-source project that provides observability for Istio service mesh.
70
+
**Kiali** is an open-source project that provides observability for the Istio service mesh.
71
71
72
72
From the **Overview** tab, click the **KialiURL** link and use the **Kiali token**.
73
73
@@ -77,20 +77,20 @@ The **Kiali dashboard** launches in a new web page.
77
77
78
78
![](/img/kiali-console.png"Kiali console view")
79
79
80
-
**Note**: To take advantage of the Istio features, pods in the mesh must be running an Istio sidecar proxy. Injection of the proxy can be done either on a per-pod basis or at namespace level. To enable side car injection, see **<https://istio.io/latest/docs/setup/additional-setup/sidecar-injection/>**. For information about using Kiali, see the **[Kiali documentation](https://kiali.io/docs/)**.
80
+
**Note**: To take advantage of the Istio features, pods in the mesh must be running an Istio sidecar proxy. Injection of the proxy can be done either on a per-pod basis or at namespace level. To enable side car injection, refer to the [setup instructions](https://istio.io/latest/docs/setup/additional-setup/sidecar-injection/). For information about using Kiali, see the **[Kiali documentation](https://kiali.io/docs/)**.
81
81
82
-
**Step-4: Download scoped kubeconfig from Container platform page**
82
+
### **Step-4: Download scoped kubeconfig from the container platform page**
83
83
84
84
* From the **Clusters** tab, select the '**hpe**' Kubernetes cluster and click **Launch Service Console**. This will direct you to the container platform page.
85
85
* Click on Download **kubeconfig**.
86
86
87
-
**Note**: Launching service console from HPE GreenLake Central is configured through SAML SSO and adds a session token to the kubeconfig file. You will need to download the kubeconfig file again if you want to continue to access the cluster when the session token expires after an hour.
87
+
**Note**: Launching the service console from HPE GreenLake Central is configured through SAML SSO and adds a session token to the kubeconfig file. You will need to download the kubeconfig file again if you want to continue to access the cluster when the session token expires after an hour.
88
88
89
-
**Step-5: Deploying a sample Istio application: Bookinfo**
89
+
### **Step-5: Deploying a sample Istio application: Bookinfo**
90
90
91
-
This procedure follows the standard Istio documentation to deploy a sample application. To know more about Bookinfo Application, see **[Istio documentation](https://istio.io/latest/docs/examples/bookinfo/)**.
91
+
This procedure follows the standard Istio documentation to deploy a sample application. To know more about Bookinfo Application, see the **[Istio documentation](https://istio.io/latest/docs/examples/bookinfo/)**.
92
92
93
-
**Create the namespace and label for Istio sidecar proxy injection to deploy the application in bookinfo namespace**
93
+
#### **Use the following commands to create the namespace and label for Istio sidecar proxy injection to deploy the application in the bookinfo namespace**.
94
94
95
95
```shellsession
96
96
$ kubectl create namespace bookinfo
@@ -104,9 +104,7 @@ NAME STATUS AGE LABELS
104
104
bookinfo Active 105s gl.hpe.com/namespaceid=10d70074-0c2b-4221-804e-1437ed1842ca,hpe.com/cluster=stub,hpe.com/namespacetype=Tenant,hpe.com/tenant=bookinfo,hpe.com/version=6.2.0,hpecp.hpe.com/hpecptenant=hpecp-tenant-106,istio-injection=enabled,kubernetes.io/metadata.name=bookinfo,serving.kubeflow.org/inferenceservice=enabled
105
105
```
106
106
107
-
**Deploy sample application by using the created namespace bookinfo**
108
-
109
-
Deploy the Bookinfo application using the YAML manifest file i.e. **services/istio/release-1.16/samples/bookinfo/bookinfo.yaml** from the Github repository **<https://github.com/cxteamtrials/caas-trials-content>**.
107
+
#### **Deploy** the **Bookinfo** application using the YAML manifest file i.e. **services/istio/release-1.16/samples/bookinfo/bookinfo.yaml** from the [](https://github)**[Github repository](https://github.com/cxteamtrials/caas-trials-content)**.
110
108
111
109
```shellsession
112
110
$ kubectl apply -f bookinfo.yaml -n bookinfo
@@ -126,7 +124,7 @@ serviceaccount/bookinfo-productpage created
126
124
deployment.apps/productpage-v1 created
127
125
```
128
126
129
-
**Confirm all pods and services are deployed successfully**
127
+
#### **Confirm all pods and services are deployed successfully**.
**Monitor the sample application using the Kiali dashboard**
188
+
# **Monitor the sample application using the Kiali dashboard**
191
189
192
-
Enter **bookinfo** into the field Filter by Namespace. The Kiali Overview screen displays the details about the namespace bookinfo. It shows that 4 applications are running in the **namespace bookinfo** with no inbound traffic.
190
+
Enter **bookinfo** into the field Filter by Namespace. The Kiali overview screen displays the details about the namespace bookinfo. It shows that 4 applications are running in the **namespace bookinfo** with no inbound traffic.
193
191
194
192
![](/img/kiali-bookinfo.png"Kiali overview")
195
193
@@ -209,8 +207,8 @@ In the **Services** tab from the left navigation menu, after selecting the **nam
You can find the GitHub repository that hosts demo code **[here](https://github.com/cxteamtrials/caas-trials-content)**.
215
213
216
-
We hope that this blog post has provided you with enough information for you to get started deploying containerized application or a managed service on a Kubernetes-based container stack using the cluster add-on feature provided by **HPE GreenLake for Private Cloud Enterprise: Containers**, refer to the **[HPE Developer Community blog](https://developer.hpe.com/)**.
214
+
We hope that this blog post has provided you with enough information for you to get started deploying containerized application or a managed service **i.e. Istio service mesh**on a Kubernetes-based container stack using the cluster add-on feature provided by **HPE GreenLake for Private Cloud Enterprise: Containers**, refer to the **[HPE Developer Community blog](https://developer.hpe.com/)**.
0 commit comments