Skip to content

Commit

Permalink
docs: improve demo readme
Browse files Browse the repository at this point in the history
Signed-off-by: Charles-Edouard Brétéché <[email protected]>
  • Loading branch information
eddycharly committed Mar 11, 2024
1 parent a1e616f commit f92f029
Show file tree
Hide file tree
Showing 3 changed files with 27 additions and 9 deletions.
34 changes: 27 additions & 7 deletions demo/istio/README.md
Original file line number Diff line number Diff line change
@@ -1,27 +1,47 @@
# Istio Demo

This Istio Demo is prototype of the kyverno envoy plugin .
This Istio Demo is prototype of the kyverno envoy plugin.

## Overview

The goal of the demo to show user how kyverno-envoy-plugin will work with istio and how it can be used to enforce policies to the traffic between services. The Kyverno-envoy-plugin allows configuring these Envoy proxies to query Kyverno-json for policy decisions on incoming requests.

## Contains

- A manifests folder with everything we need to run the demo .
- bootstrap.sh creates the cluster and installs istio .
## Demo instructions

### Required tools

1. [`kind`](https://kind.sigs.k8s.io/)
1. [`kubectl`](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
1. [`helm`](https://helm.sh/docs/intro/install/)

### Create a local cluster and install Istio

The [bootstrap.sh](bootstrap.sh) script contains everything needed to create a local cluster and install Istio.

```console
# create a local cluster and install istio
./bootstrap.sh
```

### Sample application

Manifests for the sample application are available in [sample-application.yaml](manifests/sample-application.yaml).

```console
# deploy sample application
kubectl apply -f ./manifests.yaml
```

## Architecture

The below architecture illustrates a scenario where no service mesh or Envoy-like components have been pre-installed or already installed.

![Architecture](architecture1.png)


The below architecture illustrates a scenario where a service mesh or Envoy-like components have been pre-installed or already installed.
![Architecture](architecture2.png)

## Requirements

- Istio Authorizationpolicy manifest to add "extension provider " concept in MeshConfig to specify Where/how to talk to envoy ext-authz service
-
-
2 changes: 0 additions & 2 deletions demo/istio/bootstrap.sh
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@
KIND_IMAGE=kindest/node:v1.29.2
ISTIO_REPO=https://istio-release.storage.googleapis.com/charts
ISTIO_NS=istio-system
ISTIO_INGRESS_NS=istio-ingress

# Create Kind cluster
kind create cluster --image $KIND_IMAGE --wait 1m --config - <<EOF
Expand All @@ -30,4 +29,3 @@ EOF
# Install Istio components
helm upgrade --install istio-base --namespace $ISTIO_NS --create-namespace --wait --repo $ISTIO_REPO base
helm upgrade --install istiod --namespace $ISTIO_NS --create-namespace --wait --repo $ISTIO_REPO istiod
helm upgrade --install istio-ingress --namespace $ISTIO_INGRESS_NS --create-namespace --wait --repo $ISTIO_REPO gateway
File renamed without changes.

0 comments on commit f92f029

Please sign in to comment.