Illumina Innovates with Rancher and Kubernetes
The gateway to each cluster can have its own port or load balancer, which is unrelated to a service mesh. By default, each Rancher-provisioned cluster has one NGINX ingress controller allowing traffic into the cluster.
You can use the NGINX ingress controller with or without Istio installed. If this is the only gateway to your cluster, Istio will be able to route traffic from service to service, but Istio will not be able to receive traffic from outside the cluster.
To allow Istio to receive external traffic, you need to enable Istio’s gateway, which works as a north-south proxy for external traffic. When you enable the Istio gateway, the result is that your cluster will have two ingresses.
You will also need to set up a Kubernetes gateway for your services. This Kubernetes resource points to Istio’s implementation of the ingress gateway to the cluster.
You can route traffic into the service mesh with a load balancer or just Istio’s NodePort gateway. This section describes how to set up the NodePort gateway.
For more information on the Istio gateway, refer to the Istio documentation.
The ingress gateway is a Kubernetes service that will be deployed in your cluster. There is only one Istio gateway per cluster.
Result: The gateway is deployed, which allows Istio to receive traffic from outside the cluster.
To allow traffic to reach Ingress, you will also need to provide a Kubernetes gateway resource in your YAML that points to Istio’s implementation of the ingress gateway to the cluster.
apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: name: bookinfo-gateway spec: selector: istio: ingressgateway # use istio default controller servers: - port: number: 80 name: http protocol: HTTP hosts: - "*" --- apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: bookinfo spec: hosts: - "*" gateways: - bookinfo-gateway http: - match: - uri: exact: /productpage - uri: prefix: /static - uri: exact: /login - uri: exact: /logout - uri: prefix: /api/v1/products route: - destination: host: productpage port: number: 9080
Result: You have configured your gateway resource so that Istio can receive traffic from outside the cluster.
Confirm that the resource exists by running:
kubectl get gateway -A
The result should be something like this:
NAME AGE bookinfo-gateway 64m
To test and see if the BookInfo app deployed correctly, the app can be viewed a web browser using the Istio controller IP and port, combined with the request name specified in your Kubernetes gateway resource:
http://<IP of Istio controller>:<Port of istio controller>/productpage
To get the ingress gateway URL and port,
System
istio-system
istio-ingressgateway
80/tcp
/productpage
Result: You should see the BookInfo app in the web browser.
For help inspecting the Istio controller URL and ports, try the commands the Istio documentation.
The official Istio documentation suggests kubectl commands to inspect the correct ingress host and ingress port for external requests.
kubectl
You can try the steps in this section to make sure the Kubernetes gateway is configured properly.
In the gateway resource, the selector refers to Istio’s default ingress controller by its label, in which the key of the label is istio and the value is ingressgateway. To make sure the label is appropriate for the gateway, do the following:
istio
ingressgateway