Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

common
Name of the ClusterMicroserviceIstio ConfigurationComments
Cluster01
  1. sleep 


Microservice
Resource
Logicalcloud01Logicalcloud02
Common access for httpbinserviceEntry (httpbin)
sleepdestinationRule
for TLS

bookinfo-productpage

destinationRule for simple TLS, Loadbalancing and circuit breaking

AuthorizationPolicy for Access Control


AuthorizationPolicy, destinationRule 



Cluster02httpbin


Microservice
Resource
Logicalcloud01
httpbinsleepdestinationRule for TLS
Logicalcloud02

destinationRule for simple TLS, Loadbalancing and circuit breaking

AuthorizationPolicy for Access Control

common access for bookinfo-productpageserviceEntry
bookinfo-userdestinationRule
for TLS
common serviceEntry (bookinfo-productpage)

sleepdestinationRule



Cluster01 Resources

1. ServiceEntry - To enable access to httpbin  httpbin
Code Block
languageyml
themeEclipse
titleServiceEntry
linenumberstrue
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: servicename-httpbin
spec:
  hosts:
  - httpbin.namespace02.logicalcloud02
  # template for the remote service name - <servicename.namespace.global>
  # Treat remote cluster services as part of the service mesh
  # as all clusters in the service mesh share the same root of trust.
  location: MESH_INTERNAL
  ports:
  - name: http1
    number: 8000
    protocol: http
  resolution: DNS
  addresses:
  # the IP address to which httpbin.<namespace>.<logicalcloudname> will resolve to
  # must be unique for each remote service, within a given cluster.
  # This address need not be routable. Traffic for this IP will be captured
  # by the sidecar and routed appropriately.
  - 240.0.0.2
  endpoints:
  # This is the routable address of the istio ingress gateway in cluster02
  # routed to this address.
  - address: 172.25.55.50
    ports:
      http1: 15443 //Sni. Do not change this

...