You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/blog/a-guide-to-enable-managed-istio-service-mesh-in-a-kubernetes-cluster-on-hpe-greenlake-for-private-cloud-enterprise.md
+31-29Lines changed: 31 additions & 29 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,59 +32,61 @@ In this blog post, we demonstrate how an end user can deploy a containerized app
32
32
33
33
To create a cluster, you must have been assigned the roles of **Private Cloud Cluster Owner** and **Private Cloud Widget Viewer**.
34
34
35
-
* From the Containers main page, under the Clusters tab, click Create Cluster.
36
-
* In the Create Cluster form, provide the cluster name '**hpe**', and select the standard cluster blueprint. The new cluster appears in the list of clusters.
35
+
* From the **Containers** main page, under the **Clusters** tab, click **Create Cluster**.
36
+
* In the **Create Cluster** form, provide the cluster name '**hpe**', and select the standard cluster blueprint. The new cluster appears in the list of clusters.
37
37
38
-
38
+
![](/img/clustermainpage-2.png"Clusters view")
39
39
40
40
As indicated above, there are multiple clusters deployed in parallel for multiple purposes. For the **Istio** service mesh add-on enablement/deployment in our example, we will use created cluster with the name '**hpe**'.
41
41
42
-
42
+
![](/img/clusterhpeview.png"Cluster 'hpe' view")
43
43
44
44
**Step-2: Enabling an add-on from a cluster**
45
45
46
-
* On the Containers main page, click a cluster row to open the cluster details screen.
47
-
* On the cluster details screen, click the Add-ons tab.
48
-
* Click Enable Add-on if no add-ons are enabled or click Enable Another Add-on.
46
+
* On the **Containers** main page, click a cluster row to open the cluster details screen.
47
+
* On the cluster details screen, click the **Add-ons** tab.
48
+
* Click **Enable Add-on** if no add-ons are enabled or click **Enable Another Add-on**.
49
49
50
-
50
+
![](/img/blankaddonpage.png"Add-ons view")
51
51
52
-
* In the Enable Addon wizard, select the add-on and click Next.
52
+
* In the **Enable Add-on** wizard, select the**Istio-service-mesh** add-on and click Next.
**Step-3: Launching the Kiali - the console for Istio service mesh**
69
69
70
-
From the Overview tab, click the **KialiURL** link and use the **Kiali token**.
70
+
**Kiali** is an open-source project that provides observability for Istio service mesh.
71
+
72
+
From the **Overview** tab, click the **KialiURL** link and use the **Kiali token**.
71
73
72
74
The **Kiali dashboard** launches in a new web page.
73
75
74
-
**Note**: KialiURL might be different in your environment.
76
+
**Note**: The URL for the Kiali console might be different in your environment.
75
77
76
-
78
+
![](/img/kiali-console.png"Kiali console view")
77
79
78
80
**Note**: To take advantage of the Istio features, pods in the mesh must be running an Istio sidecar proxy. Injection of the proxy can be done either on a per-pod basis or at namespace level. To enable side car injection, see **<https://istio.io/latest/docs/setup/additional-setup/sidecar-injection/>**. For information about using Kiali, see the **[Kiali documentation](https://kiali.io/docs/)**.
79
81
80
82
**Step-4: Download scoped kubeconfig from Container platform page**
81
83
82
-
* From the Clusters tab, select the '**hpe**' Kubernetes cluster and click **Launch Service Console**. This will direct you to the container platform page.
84
+
* From the **Clusters** tab, select the '**hpe**' Kubernetes cluster and click **Launch Service Console**. This will direct you to the container platform page.
83
85
* Click on Download **kubeconfig**.
84
86
85
-
**Note**: Launching HPE Ezmeral Runtime Enterprise from HPE GreenLake Central is configured through SAML SSO and adds a session token to the kubeconfig file. You will need to download the kubeconfig file again if you want to continue to access the cluster when the session token expires after an hour.
87
+
**Note**: Launching service console from HPE GreenLake Central is configured through SAML SSO and adds a session token to the kubeconfig file. You will need to download the kubeconfig file again if you want to continue to access the cluster when the session token expires after an hour.
86
88
87
-
**Step-5: Deploying a sample Istio application**
89
+
**Step-5: Deploying a sample Istio application: Bookinfo**
88
90
89
91
This procedure follows the standard Istio documentation to deploy a sample application. To know more about Bookinfo Application, see **[Istio documentation](https://istio.io/latest/docs/examples/bookinfo/)**.
90
92
@@ -181,33 +183,33 @@ Bookinfo application **productpage** can be accessed in the browser by typing th
181
183
182
184
Note : Above URL might be different in your environment. You can form the URL by referring annotations from the **productpage** service.
**Monitor the sample application using the Kiali dashboard**
189
191
190
192
Enter **bookinfo** into the field Filter by Namespace. The Kiali Overview screen displays the details about the namespace bookinfo. It shows that 4 applications are running in the **namespace bookinfo** with no inbound traffic.
191
193
192
-
194
+
![](/img/kiali-bookinfo.png"Kiali overview")
193
195
194
196
In the **Graph** tab from the left navigation menu, after selecting the **namespace bookinfo**, the screen shows an overview topology of the Bookinfo application.
In the **Applications** tab from the left navigation menu, after selecting the **namespace bookinfo**, the screen shows application details of the Bookinfo application.
In the **Workloads** tab from the left navigation menu, after selecting the **namespace bookinfo**, the screen shows deployment details of the Bookinfo application.
In the **Services** tab from the left navigation menu, after selecting the **namespace bookinfo**, you can check all the services details of the Bookinfo application.
0 commit comments