https://github.com/tetratelabs/getmesh
https://github.com/tetratelabs/getmesh
Last synced: 6 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/tetratelabs/getmesh
- Owner: tetratelabs
- License: apache-2.0
- Created: 2021-02-10T05:32:00.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2023-09-14T09:47:16.000Z (over 2 years ago)
- Last Synced: 2025-04-19T11:32:44.314Z (9 months ago)
- Language: Go
- Homepage:
- Size: 398 KB
- Stars: 143
- Watchers: 10
- Forks: 27
- Open Issues: 22
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
- awesome-cloud-native - getmesh - An integration, and lifecycle management CLI tool that ensures the use of supported and trusted versions of Istio. (Service Mesh)
README
# GetMesh [](https://opensource.org/licenses/Apache-2.0)
# Overview
An integration, and lifecycle management CLI tool that ensures the use of supported and trusted versions of Istio. The enterprises require ability to control Istio versioning, support multiple versions of istio, ability to easily move between the versions, integration with cloud providers certification systems and centralized config management and validation.
The getmesh CLI tool supports these enterprise level requirements via:
- enforcement of fetching certified versions of Istio and enables only compatible versions of Istio installation
- allows seamlessly switching between multiple istioctl versions
- includes FIPS compliant flavor
- delivers Istio configuration validations platform based by integrating validation libraries from multiple sources
- uses number of cloud provider certificate management systems to create Istio CA certs that are used for signing Service-Mesh managed workloads
- also provides multiple additional integration points with cloud providers
Istio release schedule can be very aggressive for the enterprise life-cycle and change management practices - getmesh addresses this concern by testing all Istio versions against different kubernetes distributions for functional integrity. The getmesh supported versions of Istio are actively supported for security patches and other bug updates and have much longer support life than provided by upstream Istio.
Considering that some of Service-Mesh customers need to support elevated security requirements - getmesh addresses the compliance restriction by offering three flavors of Istio distribution:
- _tetrate_ tracks the upstream Istio and may have additional patches applied
- _tetratefips_ a FIPS compliant version of tetrate flavor
- _istio_ is upstream built Istio
The above functionality is achieved via elegant transparent approach, where the existing setup and tools are fully leveraged to provide additional functionality and enterprise desired feature sets and controls:
- getmesh connects to the kubernetes cluster pointed to by the default kubernetes config file. If KUBECONFIG environment variable is set, then takes precedence.
- Config validation is done against two targets:
cluster current config that might include multiple Istio configuration constructs
in addition getmesh validates the manifest yaml files (that are not applied yet to the cluster)
- Creation of CA cert for Istio assumes the provider set up to issue intermediary CA cert is already done. This is optional and the default is self signed cert by Istio for workload certificates
# Get Started
getmesh can be obtained by issuing the following command:
```sh
curl -sL https://istio.tetratelabs.io/getmesh/install.sh | bash
```
This, by default, downloads the latest version of getmesh and certified Istio. To check if the download was successful, run the [version command](/doc/en/getmesh-cli/reference/getmesh_version/_index.md):
```sh
getmesh version
```
or
```sh
getmesh version --remote=false #only the client version details
```
An output of the form below suggests that getmesh was installed successfully.
getmesh version: 0.6.0
active istioctl: 1.8.2-tetrate-v0
To see the list of commands available with getmesh and its supported features, run the [help command](/doc/en/getmesh-cli/reference/getmesh_help/_index.md):
```sh
getmesh --help
```
For more information on getmesh, please visit [istio.tetratelabs.io](https://istio.tetratelabs.io/).
# Contributing
For developers interested in contributing to
, please follow the instruction in [CONTRIBUTING.md](CONTRIBUTING.md).