Hello and welcome to this presentation on Istio in Oracle Cloud Native Environment.
For our objectives today, after viewing this video, you should be able to:
Describe the Istio module deployment procedure. Verify Istio deployment in Oracle Cloud Native
Environment. Enable Istio automatic sidecar injection.
Deploy an application in Oracle Cloud Native Environment using a YAML file.
And we’ll finish up with an hands-on demonstration. Istio is installed as part of Oracle Cloud
Native Environment installation. Run the olcnectl command shown on the slide
to list the available modules for an environment. This command shown assumes you have already
created an environment named myenvironment. The list of available modules includes Istio.
Run the olcnectl module create command shown on the slide to add the Istio module to the
environment. This command also adds the Helm module in
a single command. The command shown assumes you have already
created an environment named myenvironment, and you have already added and deployed the
Kubernetes module, named mycluster. In this example, myistio is the name that
you give to the Istio module. You can then run the olcnectl module install
command shown on the slide to deploy Istio. Run the olcnectl module property command shown
on the slide, followed by the export KUBECONFIG command shown to enable a regular use to run
kubectl commands from a master Kubernetes node.
This command shown assumes your environment is named myenvironment, and your Kubernetes
cluster is named mycluster. You can then run the kubectl get namespace
command shown on the slide to list the namespaces, which includes the istio-system namespace.
Run the kubectl get deployment command shown on the slide to list the deployments for the
istio-system namespace. Istio deployments include grafana and prometheus,
an ingress gateway and an egress gateway, as well as additional Istio deployments.
Automatic sidecar injection provides for injection of proxy sidecar containers into application
pods. These proxies are called sidecars because
they run in separate containers beside every service container in the mesh.
The Envoy product implements the proxy functionality in Istio.
Envoy proxies direct all inter-service communication in the service mesh.
To implement automatic sidecar injection for an application, run the kubectl label namespace
command shown on the slide, with istio-injection=enabled. Label any namespace that an application uses,
including the default namespace. Run the kubectl get command shown on the slide
to list namespaces labeled with istio-injection=enabled. You can then deploy an application using the
kubectl apply command as shown on the slide. Provide the location of a YAML file for the
application deployment. Proxy sidecars will be injected into pods
that are started from this deployment. Use the kubectl get command shown on the slide
to list the application pods. Note that the READY column is 2/2 for each
pod indicating that Istio automatic proxy sidecar injection is enabled and that the
pods in the mesh are running an Istio sidecar proxy.
Without automatic proxy sidecar injection enabled, the READY column would just show
1 for each pod. Now we'll now begin the demonstration portion
of this video. First we'll list namespaces that have Automatic
sidecar injection enabled. Note that there are none.
You can also use this command to list all namespaces and include an istio-injection
column Again, no namespaces have Automatic sidecar
injection enabled. We'll deploy an application using a YAML file.
We'll list the pods and notice the READY column only shows only 1/1 indicating the pod is
not running an Istio sidecar proxy. We'll now delete this application.
We'll show the pod no longer exists. Now we'll enable automatic sidecar injection
for the default namespace. We can show that it is enabled for the default
namespace. We'll deploy our application again.
Now when we view the pod, the READY column is 2/2 indicating that Istio automatic proxy
sidecar injection is enabled and that the pods in the mesh are running an Istio sidecar
proxy. For further information about Istio and the
Envoy proxy, you can visit the Istio and Envoy project sites shown on this slide.
Oracle also provides an extensive number of resources which you can use to learn more
about this subject and others. This concludes this presentation. Thank you
for watching.