Skip to content

Commit f14a48c

Browse files
committed
Update Blog “integrating-istio-and-spire”
1 parent e45912c commit f14a48c

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

content/blog/integrating-istio-and-spire.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -301,7 +301,7 @@ Verify that every workload with same label as clusterSPIFFEID CRD’s match labe
301301

302302
![](/img/server-entries.png)
303303

304-
**4.7** Verify that the certificate issuer of workloads is SPIRE using following commands for each workload.
304+
**4.7** Verify that the certificate issuer of workloads is SPIRE using the following commands for each workload.
305305

306306
```shellsession
307307
istioctl proxy-config secret <pod_name> -n <namespace_name> -o json | jq -r '.dynamicActiveSecrets[0].secret.tlsCertificate.certificateChain.inlineBytes' | base64 --decode > chain.pem
@@ -312,9 +312,9 @@ k8s-spiffe-integ-master-7j7fh-m67q9:~ openssl x509 -in chain.pem -text | grep SP
312312
Subject: C = US, O = SPIRE, x500UniqueIdentifier = e2f9c35b9198e1824373e874b13287d0
313313
```
314314

315-
You should also check the same for ingress-gateway pod in Istio-system namespace and verify that your deployed workloads and ingress-gateway has the same issuer.
315+
You should also check that everything is the same for the ingress-gateway pod in Istio-system namespace and verify that your deployed workloads and ingress-gateway has the same issuer.
316316

317-
#### Step 5: Open the application outside traffic
317+
#### Step 5: Open the application to outside traffic
318318

319319
The Bookinfo application is deployed but not accessible from the outside. To make it accessible, you need to create an Istio Ingress Gateway, which maps a path to a route at the edge of your mesh.
320320

@@ -340,9 +340,9 @@ NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S)
340340
istio-ingressgateway LoadBalancer 10.105.191.32 172.16.17.5 15021:30189/TCP,80:30392/TCP,443:30566/TCP 32d
341341
```
342342

343-
If the EXTERNAL-IP value is set, your environment has an external load balancer; if not, then set the external load balancer first then follow further steps.
343+
If the EXTERNAL-IP value is set, your environment has an external load balancer. If not, then set the external load balancer first then follow further steps.
344344

345-
For this cluster we are using metallb.
345+
For this cluster, we are using metallb.
346346

347347
**5.4** Download and install Kiali dashboard and Prometheus.
348348

@@ -362,7 +362,7 @@ kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.17/samp
362362
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.17/samples/addons/prometheus.yaml
363363
```
364364

365-
**5.5** Later after setting up ingress gateway and bookinfo gateway, we will view the dashboard, so for that you need to make these setting changes in your system proxy status.
365+
**5.5** After setting up the ingress gateway and bookinfo gateway, we will view the dashboard later on in this post. To ensure you'll be able to do this, you'll need to make these setting changes in your system proxy status.
366366

367367
Go to **Settings > Network > Proxy status >** Turn Use a **proxy server On**. In the exceptions field, add your external IP address of kiali and ingressgateway service.
368368

0 commit comments

Comments
 (0)