Updated helm chart readme

Author: nirgeier

Labs/09-StatefulSet/README.md

@@ -68,17 +68,29 @@
 
 ---
 ## Lab Highlights:
- - [01. Create namespace and clear previous data if there is any](#01-Create-namespace-and-clear-previous-data-if-there-is-any)
- - [02. Create and test the Stateful application](#02-Create-and-test-the-Stateful-application)
- - [03. Test the Stateful application](#03-Test-the-Stateful-application)
- - [04. Scale down the StatefulSet and check that its down](#04-Scale-down-the-StatefulSet-and-check-that-its-down)
-   - [04.01. Scale down the `Statefulset` to 0](#0401-Scale-down-the-Statefulset-to-0)
-   - [04.02. Verify that the pods Terminated](#0402-Verify-that-the-pods-Terminated)
-   - [04.03. Verify that the DB is not reachable](#0403-Verify-that-the-DB-is-not-reachable)
- - [05. Scale up again and verify that we still have the prevoius data](#05-Scale-up-again-and-verify-that-we-still-have-the-prevoius-data)
-   - [05.01. scale up the `Statefulset` to 1 or more](#0501-scale-up-the-Statefulset-to-1-or-more)
-   - [05.02. Verify that the pods is in Running status](#0502-Verify-that-the-pods-is-in-Running-status)
-   - [05.03. Verify that the pods is using the previous data](#0503-Verify-that-the-pods-is-using-the-previous-data)
+- [K8S Hands-on](#k8s-hands-on)
+- [StatefulSets](#statefulsets)
+  - [The Difference Between a `Statefulset` And a `Deployment`](#the-difference-between-a-statefulset-and-a-deployment)
+      - [`Stateless` application](#stateless-application)
+      - [`Stateful` application](#stateful-application)
+  - [`Stateful` Notes](#stateful-notes)
+    - [Stable Network Identity](#stable-network-identity)
+    - [Start and Termination Order](#start-and-termination-order)
+    - [StatefulSet Volumes](#statefulset-volumes)
+    - [To address all those requirements, Kubernetes offers the StatefulSet primitive.](#to-address-all-those-requirements-kubernetes-offers-the-statefulset-primitive)
+    - [Pre-Requirements](#pre-requirements)
+  - [Lab Highlights:](#lab-highlights)
+    - [01. Create namespace and clear previous data if there is any](#01-create-namespace-and-clear-previous-data-if-there-is-any)
+    - [02. Create and test the Stateful application](#02-create-and-test-the-stateful-application)
+    - [03. Test the Stateful application](#03-test-the-stateful-application)
+    - [04. Scale down the StatefulSet and check that its down](#04-scale-down-the-statefulset-and-check-that-its-down)
+      - [04.01. Scale down the `Statefulset` to 0](#0401-scale-down-the-statefulset-to-0)
+      - [04.02. Verify that the pods Terminated](#0402-verify-that-the-pods-terminated)
+    - [04.03. Verify that the DB is not reachable](#0403-verify-that-the-db-is-not-reachable)
+    - [05. Scale up again and verify that we still have the prevoius data](#05-scale-up-again-and-verify-that-we-still-have-the-prevoius-data)
+      - [05.01. scale up the `Statefulset` to 1 or more](#0501-scale-up-the-statefulset-to-1-or-more)
+      - [05.02. Verify that the pods is in Running status](#0502-verify-that-the-pods-is-in-running-status)
+      - [05.03. Verify that the pods is using the previous data](#0503-verify-that-the-pods-is-using-the-previous-data)
 
 ---
 
@@ -222,7 +234,7 @@ namespace/codewizard created
 
 ```sh
 # Generate and apply the required resources using kustomization
-kubectl kustomize PostgreSQL/ . | kubectl apply -f -
+kubectl kustomize PostgreSQL/ | kubectl apply -f -
 ```
 
 ---

Labs/10-Istio/README.md

@@ -0,0 +1,107 @@
+#!/bin/bash
+
+# Step 1: Install Istio using istioctl
+echo "Installing Istio..."
+curl -L https://istio.io/downloadIstio | sh -
+cd istio-*
+export PATH=$PWD/bin:$PATH
+istioctl install --set profile=demo -y
+
+# Step 2: Install Kiali using Helm
+echo "Installing Kiali..."
+helm repo add kiali https://kiali.org/helm-charts
+helm repo update
+helm install kiali-server kiali/kiali-server --namespace istio-system --set auth.strategy="anonymous"
+helm install                  \
+  --namespace kiali-operator  \
+  --create-namespace          \
+  kiali-operator              \
+  kiali/kiali-operator
+
+
+# Step 3: Enable Istio sidecar injection for all namespaces
+echo "Enabling Istio sidecar injection for default namespace..."
+kubectl label namespace default istio-injection=enabled
+kubectl label namespace codewizard istio-injection=enabled
+kubectl label namespace monitoring istio-injection=enabled
+
+
+# Step 4: Deploy the Bookinfo demo application
+echo "Deploying Bookinfo sample app..."
+kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml
+
+# Step 5: Expose the Bookinfo app through Istio gateway
+echo "Exposing Bookinfo app through Istio gateway..."
+kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml
+
+# Step 6: Apply VirtualService to route traffic to v2 of ratings
+echo "Creating VirtualService for ratings..."
+cat <<EOF | kubectl apply -f -
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: ratings-vs
+  namespace: default
+spec:
+  hosts:
+    - ratings
+  http:
+    - route:
+        - destination:
+            host: ratings
+            subset: v2
+EOF
+cat <<EOF | kubectl apply -f -
+apiVersion: kiali.io/v1alpha1
+kind: Kiali
+metadata:
+  namespace: istio-system
+  name: kiali
+spec:
+  istio_namespace: istio-system
+  auth:
+    strategy: anonymous
+  deployment:
+    view_only_mode: true
+  external_services:
+    prometheus:
+      url: http://prometheus-operated:9090
+EOF
+
+sleep 10
+
+# Step 7: Deploy addons
+echo "Deploying Istio addons..."
+kubectl apply -f samples/addons
+
+
+# Step 8: Port-forward Kiali for access
+echo "Port forwarding Kiali to http://localhost:20001..."
+kubectl port-forward -n istio-system svc/kiali 20001:20001 &
+
+echo "Installation complete. Access Kiali at http://localhost:20001."
+
+
+cat << EOF | kubectl apply -f -
+apiVersion: security.istio.io/v1beta1
+kind: PeerAuthentication
+metadata:
+  name: mtls-strict
+  namespace: default
+spec:
+  mtls:
+    mode: STRICT
+EOF
+
+cat << EOF | kubectl apply -f -
+apiVersion: networking.istio.io/v1alpha3
+kind: DestinationRule
+metadata:
+  name: mtls-destination-rule
+  namespace: default
+spec:
+  host: "*.default.svc.cluster.local"
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL
+EOF