Kubernetes/Istio - Revision history

Pio2pio: /* Resources */

2021-08-28T09:20:09Z

Resources

← Older revision		Revision as of 11:20, 28 August 2021
Line 1,697:		Line 1,697:
	* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021		* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021

			Investigate TLS:
	* [https://redhat-scholars.github.io/istio-tutorial/istio-tutorial/1.6.x/8mTLS.html Mutual TLS and Istio] inspect with tcpdump and ksniff		* [https://redhat-scholars.github.io/istio-tutorial/istio-tutorial/1.6.x/8mTLS.html Mutual TLS and Istio] inspect with tcpdump and ksniff
			* [https://www.programmersought.com/article/35504882940/ Use ksniff and Wireshark to verify service mesh TLS in Kubernetes]

	Solutions:		Solutions:
	* [https://dev.to/peterj/what-are-sticky-sessions-and-how-to-configure-them-with-istio-1e1a What are sticky sessions and how to configure them with Istio?]		* [https://dev.to/peterj/what-are-sticky-sessions-and-how-to-configure-them-with-istio-1e1a What are sticky sessions and how to configure them with Istio?]
	* [https://medium.com/@cy.chiang/how-to-integrate-aws-alb-with-istio-v1-0-b17e07cae156 integrate AWS ALB with istio] 2018		* [https://medium.com/@cy.chiang/how-to-integrate-aws-alb-with-istio-v1-0-b17e07cae156 integrate AWS ALB with istio] 2018

Pio2pio: /* Resources */

2021-08-28T09:18:48Z

Resources

← Older revision		Revision as of 11:18, 28 August 2021
Line 1,696:		Line 1,696:
	** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub		** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub
	* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021		* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021

			* [https://redhat-scholars.github.io/istio-tutorial/istio-tutorial/1.6.x/8mTLS.html Mutual TLS and Istio] inspect with tcpdump and ksniff

	Solutions:		Solutions:
	* [https://dev.to/peterj/what-are-sticky-sessions-and-how-to-configure-them-with-istio-1e1a What are sticky sessions and how to configure them with Istio?]		* [https://dev.to/peterj/what-are-sticky-sessions-and-how-to-configure-them-with-istio-1e1a What are sticky sessions and how to configure them with Istio?]
	* [https://medium.com/@cy.chiang/how-to-integrate-aws-alb-with-istio-v1-0-b17e07cae156 integrate AWS ALB with istio] 2018		* [https://medium.com/@cy.chiang/how-to-integrate-aws-alb-with-istio-v1-0-b17e07cae156 integrate AWS ALB with istio] 2018

Pio2pio: /* Get info */

2021-08-28T09:11:08Z

Get info

← Older revision		Revision as of 11:11, 28 August 2021
Line 649:		Line 649:
	:[[File:ClipCapIt-210317-134114.PNG]]		:[[File:ClipCapIt-210317-134114.PNG]]
	{{Note\|Screen grab from previous Istio v1.9 version}}		{{Note\|Screen grab from previous Istio v1.9 version}}

			= Ingress flow from ALB to the service =
			This example graph shows the traffic flow from ALB -> a container
			:[[File:ClipCapIt-210828-101105.PNG]]

	= Get [https://istio.io/latest/docs/setup/install/istioctl/ info] =		= Get [https://istio.io/latest/docs/setup/install/istioctl/ info] =

Pio2pio: /* Resources */

2021-08-28T09:08:55Z

Resources

← Older revision		Revision as of 11:08, 28 August 2021
Line 1,692:		Line 1,692:
	** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub		** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub
	* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021		* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021

			Solutions:
			* [https://dev.to/peterj/what-are-sticky-sessions-and-how-to-configure-them-with-istio-1e1a What are sticky sessions and how to configure them with Istio?]
			* [https://medium.com/@cy.chiang/how-to-integrate-aws-alb-with-istio-v1-0-b17e07cae156 integrate AWS ALB with istio] 2018

Pio2pio: /* Resources */

2021-08-12T16:24:46Z

Resources

← Older revision		Revision as of 18:24, 12 August 2021
Line 1,691:		Line 1,691:
	** [https://www.solo.io/blog/upgrading-istio-without-downtime/ upgrading-istio-without-downtime] Blog		** [https://www.solo.io/blog/upgrading-istio-without-downtime/ upgrading-istio-without-downtime] Blog
	** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub		** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub
			* [https://dzone.com/articles/safely-upgrade-the-istio-control-plane-with-revisi?oid&utm_medium=email&_hsmi=148688354&_hsenc=p2ANqtz-8dBVjZA0BJoWbS4e-Guer014AS5F2-5lgkBH63X87QKdnr5N4XB7d4AmRHjjWXDO7NfmsE4hVgOG-y-RLAtNawPzLvQbEXuVEfsRJVcAadDTxrxJ8&utm_content=148687162&utm_source=hs_email# Safely Upgrade the Istio Control Plane With Revisions and Tags] 05-Aug-2021

Pio2pio: /* Resources */

2021-08-12T16:23:25Z

Resources

← Older revision		Revision as of 18:23, 12 August 2021
Line 1,686:		Line 1,686:
	Related technology		Related technology
	* [https://developers.google.com/web/fundamentals/performance/http2 Introduction to HTTP/2] http/2 is used by Envoy internally		* [https://developers.google.com/web/fundamentals/performance/http2 Introduction to HTTP/2] http/2 is used by Envoy internally

			Tutorials and demos:
			* Upgrading Istio without Downtime 1-9-7 to 1-10-3
			** [https://www.solo.io/blog/upgrading-istio-without-downtime/ upgrading-istio-without-downtime] Blog
			** [https://github.com/nmnellis/istio-upgrade-demo istio-upgrade-demo] GitHub

Pio2pio: /* Install control-plane */

2021-06-01T08:06:00Z

Install control-plane

← Older revision		Revision as of 10:06, 1 June 2021
Line 319:		Line 319:
	=== Install control-plane ===		=== Install control-plane ===
	* [https://istio.io/latest/blog/2021/revision-tags/ Safely upgrade the Istio control plane with revisions and tags]		* [https://istio.io/latest/blog/2021/revision-tags/ Safely upgrade the Istio control plane with revisions and tags]
			* [https://istio.io/latest/docs/setup/upgrade/canary/#stable-revision-labels-experimental Stable revision labels (experimental)]
	{{Note\|For installing v1.9.x you should first install without revisions}} eg.<code>REVISION=""</code> this is because revisions upgrade expects to have <code>default</code> revision set.		{{Note\|For installing v1.9.x you should first install without revisions}} eg.<code>REVISION=""</code> this is because revisions upgrade expects to have <code>default</code> revision set.

Pio2pio: /* Install control-plane */

2021-06-01T05:55:42Z

Install control-plane

← Older revision		Revision as of 07:55, 1 June 2021
Line 318:		Line 318:

	=== Install control-plane ===		=== Install control-plane ===
			* [https://istio.io/latest/blog/2021/revision-tags/ Safely upgrade the Istio control plane with revisions and tags]
	{{Note\|For installing v1.9.x you should first install without revisions}} eg.<code>REVISION=""</code> this is because revisions upgrade expects to have <code>default</code> revision set.		{{Note\|For installing v1.9.x you should first install without revisions}} eg.<code>REVISION=""</code> this is because revisions upgrade expects to have <code>default</code> revision set.

Pio2pio: /* Install control-plane */

2021-06-01T05:53:52Z

Install control-plane

← Older revision		Revision as of 07:53, 1 June 2021
Line 361:		Line 361:
	#discoverySelectors: # new in v1.10, choose which namespaces Istiod should watch (from api-server)		#discoverySelectors: # new in v1.10, choose which namespaces Istiod should watch (from api-server)
	#- matchLabels: # \| for building the internal mesh registry based on configurations of services,endpoints,deployments		#- matchLabels: # \| for building the internal mesh registry based on configurations of services,endpoints,deployments
			# \| dynamically restrict the set of namespaces that are part of the mesh
	# istio-discovery: enabled # <- example label		# istio-discovery: enabled # <- example label
	# #env: prod		# #env: prod
Line 427:		Line 428:
	# Restart deployments for new proxy to be injected, test the application and if all is good delete the "app canary deployment" and continue with full rollout of all deployments.		# Restart deployments for new proxy to be injected, test the application and if all is good delete the "app canary deployment" and continue with full rollout of all deployments.
	</source>		</source>


	=== Install ingress-gateway ===		=== Install ingress-gateway ===

Pio2pio: /* Install ingress-gateway */

2021-06-01T05:48:09Z

Install ingress-gateway

← Older revision		Revision as of 07:48, 1 June 2021
Line 430:		Line 430:

	=== Install ingress-gateway ===		=== Install ingress-gateway ===
	We install the ingress-gateway components separated in a separated namespace <code>istio-~~ingrss~~</code>. This is to allow to upgrade CP and ~~IGW~~ components independent. We achieve this using 'minimal' profile that includes only control CP components. Then for IGW install we use 'empty' profile that adds only the ingress-gateway. ~~More about~~ included ~~components~~ in each of [https://istio.io/latest/docs/setup/additional-setup/config-profiles/ ~~profiles~~]		We install the ingress-gateway components separated in a separated namespace <code>istio-ingress</code>. This is to allow to upgrade control-plane and ingressgateway(s) components to be independent. We achieve this using 'minimal' profile that includes only control CP components. Then for IGW install we use 'empty' profile that adds only the ingress-gateway. See a list of what is included in each [https://istio.io/latest/docs/setup/additional-setup/config-profiles/ profile].
	:[[File:ClipCapIt-210317-090509.PNG]]		:[[File:ClipCapIt-210317-090509.PNG]]


			{{Note\| '''tag''' and '''revision''' - in v1.10 ingressgateway is injected into the pod}} thus this becomes and behaves almost like any other workload. Thus the revision label should be in use eg. <code>istio.io/rev=1-10-0</code> to control the proxy version and to which control-plane the ingressgateway connects to


	<source lang=bash>		<source lang=bash>
	# Create ingress own namespace		# Create ingress own namespace