Home

Awesome

helm-starter-istio

An Istio starter template for Helm.

Stop fiddling with Istio and Kubernetes YAML and start building. This starter sets up everything you need to get a container running in Istio correctly the first time.

Features

Installation

Usage

Pick the starter you want to use:

# Create a helm chart from the starter
> helm create NAME --starter helm-starter-istio/[starter-name]

# Deploy the helm chart to kubernetes
> helm template NAME | kubectl -apply -f -

Samples

The samples directory contains example values.yaml files for installing the Istio Bookinfo sample application.

Set up Istio

The samples assume you are running Kubernetes and Istio locally using Docker Desktop using the default profile.

> istioctl install --set profile=default --set meshConfig.outboundTrafficPolicy.mode=REGISTRY_ONLY -y
> kubectl label namespace default istio-injection=enabled
> kubectl apply -f samples/gateway.yaml

Bookinfo services

To install the Bookinfo services:

> helm template --namespace default -f samples/bookinfo-product/values.yaml ingress-service | kubectl apply -f -
> helm template --namespace default -f samples/bookinfo-details/values.yaml mesh-service | kubectl apply -f -
> helm template --namespace default -f samples/bookinfo-reviews/values.yaml mesh-service | kubectl apply -f -

Then navigate to http://lvh.me/productpage.

Bookinfo mTLS

Enable mTLS authorization policies between the services:

> helm template --namespace default -f samples/bookinfo-auth-policy/values.yaml auth-policy | kubectl apply -f -

Mesh egress

Install mesh egress configuration:

> helm template --namespace default -f samples/egress/values.yaml mesh-egress | kubectl apply -f -

Install a curl pod in Kubernetes so you have a shell to log into to try curl testing different egress routes.

> kubectl apply -f https://raw.githubusercontent.com/istio/istio/master/samples/sleep/sleep.yaml