https://github.com/crcsmnky/service-mush
Service Mush: Debugging Istio Deployments
https://github.com/crcsmnky/service-mush
istio kubernetes microservices mtls security telemetry traffic
Last synced: 7 months ago
JSON representation
Service Mush: Debugging Istio Deployments
- Host: GitHub
- URL: https://github.com/crcsmnky/service-mush
- Owner: crcsmnky
- Created: 2019-08-15T21:03:06.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2019-08-21T17:38:26.000Z (about 6 years ago)
- Last Synced: 2025-03-21T09:51:12.519Z (7 months ago)
- Topics: istio, kubernetes, microservices, mtls, security, telemetry, traffic
- Homepage:
- Size: 12.7 KB
- Stars: 2
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Security: security/README.md
Awesome Lists containing this project
README
# Service Mush: Debugging Istio Deployments
## Cluster Setup
Create a GKE cluster:
- `gcloud container clusters create debugging-istio --cluster-version=latest --machine-type=n1-standard-2`
Grab the cluster credentials:
- `gcloud container clusters get-credentials debugging-istio`
Create `cluster-admin` role binding:
- `kubectl create clusterrolebinding cluster-admin-binding --clusterrole=cluster-admin --user=$(gcloud config get-value core/account)`
Download and unpack Istio:
- `curl -L https://git.io/getLatestIstio | sh -`
- `cd istio-1.2.4`
Add `istioctl` to your path:
- `export PATH=$PWD/bin:$PATH`
Install Istio:
- `kubectl apply -f install/kubernetest/istio-demo.yaml`
Wait for the Istio control plane components to be installed and ready:
- `kubectl get pod -n istio-system -w`
Enable auto-injection for `istio-proxy`:
- `kubectl label ns default istio-injection=enabled`
## Debugging Topics
Refer to the individual sections below for debugging deep-dives:
- [Traffic](traffic/)
- [Telemetry](telemetry/)
- [Security (mTLS)](security/)