ofilter/Istio_Examples
1
0
Fork 0
Code Issues 26 Pull Requests Packages Projects 1 Releases Wiki Activity

idk some changes, managed to deploy a new LB

Browse Source
This commit is contained in:
savagebidoof 2023-04-22 09:20:30 +02:00
parent 57ba00a8c5
commit 0f10f8f684
24 changed files with 60 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Istio/02-Traffic_management/06-mTLS/README.md
View File

@ -9,7 +9,9 @@ include_toc: true
## Description
Nowadays, by default, Istio will have mTLS automatically enabled, allowing the Istio Sidecars to **automatically** negotiate the TLS traffic between them.encrypted
Nowadays, by default, Istio will have mTLS automatically enabled, allowing the Istio Sidecars to **automatically** negotiate the TLS traffic between them.encrypted.
More information about that topic in the [following documentation](https://istio.io/latest/docs/tasks/security/authentication/authn-policy/#auto-mutual-tls).
To avoid this behavior, the pod requires to not have an Istio Sidecar set to that pod, for that reason on this example we set up 2 deployments, 1 with a sidecar, and a second without a sidecar.

9
Istio/02-Traffic_management/README.md
View File

@ -15,8 +15,15 @@ ALL NEEDS DOCUMENTATION
minimum TLS version:
https://istio.io/latest/docs/tasks/security/tls-configuration/workload-min-tls-version/
Should try to do a double Virtual Service chain
https://academy.tetrate.io/courses/take/istio-fundamentals/lessons/19068816-lab-2-observing-failure-injection
https://academy.tetrate.io/courses/take/istio-fundamentals/lessons/19068816-lab-2-observing-failure-injection
Circuit breaking
https://istio.io/latest/docs/tasks/traffic-management/circuit-breaking/

0
Istio/06-Authentication/01-namespaces/01-namespace.yaml → Istio/06-Internal-Authentication/01-namespaces/01-namespace.yaml
View File

0
Istio/06-Authentication/01-namespaces/README.md → Istio/06-Internal-Authentication/01-namespaces/README.md
View File

0
Istio/06-Authentication/01-namespaces/authentication.yaml → Istio/06-Internal-Authentication/01-namespaces/authentication.yaml
View File

0
Istio/06-Authentication/01-namespaces/deployment.yaml → Istio/06-Internal-Authentication/01-namespaces/deployment.yaml
View File

0
Istio/06-Authentication/01-namespaces/deployment_2.yaml → Istio/06-Internal-Authentication/01-namespaces/deployment_2.yaml
View File

0
Istio/06-Authentication/01-namespaces/gateway.yaml → Istio/06-Internal-Authentication/01-namespaces/gateway.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/01-namespace.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/01-namespace.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/01-service-accounts.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/01-service-accounts.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/README.md → Istio/06-Internal-Authentication/02-target-service-accounts/README.md
View File

0
Istio/06-Authentication/02-target-service-accounts/authentication.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/authentication.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/deployment.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/deployment.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/deployment_2.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/deployment_2.yaml
View File

0
Istio/06-Authentication/02-target-service-accounts/gateway.yaml → Istio/06-Internal-Authentication/02-target-service-accounts/gateway.yaml
View File

4
Istio/06-Authentication/README.md → Istio/06-Internal-Authentication/README.md
View File

@ -11,4 +11,6 @@
- Audit / logs (should be the 3th)
JWT seems important, refer to source.requestPrincipals
JWT seems important, refer to source.requestPrincipals
https://istio.io/latest/docs/tasks/security/authentication/

6
Istio/07-External-Authentication/README.md Normal file
View File

@ -0,0 +1,6 @@
https://istio.io/latest/docs/tasks/security/authentication/
External authorization system sounds cool
https://istio.io/latest/docs/tasks/security/authorization/authz-custom/

0
Istio/monitoring/tmp.yaml → Istio/08-monitoring/tmp.yaml
View File

0
Istio/NetworkPolicies/README.md → Istio/__-NetworkPolicies/README.md
View File

9
Istio/__-cert-management/README.md Executable file
View File

@ -0,0 +1,9 @@
https://istio.io/latest/docs/tasks/security/cert-management/
https://istio.io/latest/docs/ops/integrations/certmanager/
https://medium.com/@rd.petrusek/kubernetes-istio-cert-manager-and-lets-encrypt-c3e0822a3aaf
https://istio.io/latest/docs/tasks/security/cert-management/plugin-ca-cert/ (it's performed during the installation of Istio)
https://istio.io/latest/docs/tasks/security/cert-management/custom-ca-k8s/ (developement)

7
Istio/__Ingress/01-namespace.yaml Normal file
View File

@ -0,0 +1,7 @@
apiVersion: v1
kind: Namespace
metadata:
name: istio-ingress
labels:
istio-injection: "enabled"
---

23
Istio/__Ingress/README.md Normal file
View File

@ -0,0 +1,23 @@
https://istio.io/latest/docs/tasks/traffic-management/ingress/
TLS
https://istio.io/latest/docs/tasks/traffic-management/ingress/secure-ingress/
https://istio.io/latest/docs/setup/additional-setup/gateway/#deploying-a-gateway
kubectl apply -f 01-namespace.yaml
istioctl install -f ingress.yaml
kubectl get all -A | grep myistio
istio-ingress pod/myistio-ingressgateway-5cdcd89cfb-s4fsz 1/1 Running 0 43s
istio-ingress service/myistio-ingressgateway LoadBalancer 10.102.38.206 192.168.1.51 15021:30287/TCP,80:30979/TCP,443:31405/TCP 43s
istio-ingress deployment.apps/myistio-ingressgateway 1/1 1 1 44s
istio-ingress replicaset.apps/myistio-ingressgateway-5cdcd89cfb 1 1 1 44s
istio-ingress horizontalpodautoscaler.autoscaling/myistio-ingressgateway Deployment/myistio-ingressgateway <unknown>/80% 1 5 1 44s

5
Istio/cert-manager/README.md
View File

@ -1,5 +0,0 @@
https://istio.io/latest/docs/tasks/security/cert-management/
https://istio.io/latest/docs/ops/integrations/certmanager/
https://medium.com/@rd.petrusek/kubernetes-istio-cert-manager-and-lets-encrypt-c3e0822a3aaf

1
Istio/tmp/README.md Normal file
View File

@ -0,0 +1 @@
https://istio.io/latest/docs/tasks/traffic-management/locality-load-balancing/