diff --git a/demo/istio/README.md b/demo/istio/README.md index b34bc43c..98d92ce6 100644 --- a/demo/istio/README.md +++ b/demo/istio/README.md @@ -1,22 +1,43 @@ # Istio Demo -This Istio Demo is prototype of the kyverno envoy plugin . +This Istio Demo is prototype of the kyverno envoy plugin. ## Overview The goal of the demo to show user how kyverno-envoy-plugin will work with istio and how it can be used to enforce policies to the traffic between services. The Kyverno-envoy-plugin allows configuring these Envoy proxies to query Kyverno-json for policy decisions on incoming requests. -## Contains - -- A manifests folder with everything we need to run the demo . -- bootstrap.sh creates the cluster and installs istio . +## Demo instructions + +### Required tool + +1. [`kind`](https://kind.sigs.k8s.io/) +1. [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/) +1. [`helm`](https://helm.sh/docs/intro/install/) + +### Create a local cluster and install Istio + +The [bootstrap.sh](bootstrap.sh) script contains everything needed to create a local cluster and install Istio. + +```console +# create a local cluster and install istio +./bootstrap.sh +``` + +### Sample application + +Manifests for the sample application are available in [sample-application.yaml](manifests/sample-application.yaml). + +```console +# deploy sample application +kubectl apply -f ./manifests.yaml +``` ## Architecture + The below architecture illustrates a scenario where no service mesh or Envoy-like components have been pre-installed or already installed. ![Architecture](architecture1.png) - The below architecture illustrates a scenario where a service mesh or Envoy-like components have been pre-installed or already installed. ![Architecture](architecture2.png) @@ -24,4 +45,3 @@ The below architecture illustrates a scenario where a service mesh or Envoy-like - Istio Authorizationpolicy manifest to add "extension provider " concept in MeshConfig to specify Where/how to talk to envoy ext-authz service - -- \ No newline at end of file diff --git a/demo/istio/bootstrap.sh b/demo/istio/bootstrap.sh index bef33b2a..5f63a845 100755 --- a/demo/istio/bootstrap.sh +++ b/demo/istio/bootstrap.sh @@ -3,7 +3,6 @@ KIND_IMAGE=kindest/node:v1.29.2 ISTIO_REPO=https://istio-release.storage.googleapis.com/charts ISTIO_NS=istio-system -ISTIO_INGRESS_NS=istio-ingress # Create Kind cluster kind create cluster --image $KIND_IMAGE --wait 1m --config - <