profile
viewpoint
Mustafa Kırımlı mustafakirimli noon.com Dubai, United Arab Emirates http://blog.mustafakirimli.com DevOps @ noon.com

mustafakirimli/amazon-ecs-developer-guide 0

The open source version of the Amazon ECS developer guide. You can submit feedback & requests for changes by submitting issues in this repo or by making proposed changes & submitting a pull request.

mustafakirimli/aws-node-termination-handler 0

A Kubernetes DaemonSet to gracefully handle EC2 Spot Instance interruptions.

mustafakirimli/blogm 0

BlogM Django based Basic Blog Project

mustafakirimli/BST 0

Binary Search Tree Implementation in Java

mustafakirimli/cf-auth-proxy 0

CloudFlare Access JWT Validator

mustafakirimli/cloudflared 0

Argo Tunnel client

mustafakirimli/docker-slave 0

Base Docker image for Jenkins Agents

mustafakirimli/gcslock 0

Simple, scalable, distributed mutex for serializing computations anywhere on the Internet (with Go and shell clients)

mustafakirimli/jenkins-docker 0

additional tools installed on top of the jenkins image

issue commentistio/istio

ExternalIPs of ingressgateway not effect using helm values

@cwocwo I see, I did not expect that its removing ports.

there is another way to approach same result which is overlays, that way it does not touch the default configs.

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    ingressGateways:
      - enabled: true
        k8s:
          overlays: [
            {
              api_version: 'v1',
              kind: 'Service',
              name: 'istio-ingressgateway',
              patches: [
                {
                  path: 'spec.type',
                  value: nodePort
                },
                {
                  path: 'spec.externalIPs',
                  value: ["10.110.22.99"]
                }
              ]
           }
         ]
istioctl manifest generate -f iop.yml | grep externalIPs -B 12 -A 20
---
apiVersion: v1
kind: Service
metadata:
  annotations: null
  labels:
    app: istio-ingressgateway
    istio: ingressgateway
    release: istio
  name: istio-ingressgateway
  namespace: istio-system
spec:
  externalIPs:
  - 10.110.22.99
  ports:
  - name: status-port
    port: 15021
    targetPort: 15021
  - name: http2
    port: 80
    targetPort: 8080
  - name: https
    port: 443
    targetPort: 8443
  - name: tls
    port: 15443
    targetPort: 15443
  selector:
    app: istio-ingressgateway
    istio: ingressgateway
  type: nodePort

---

Not sure which one is best fit in terms of best practices.

cwocwo

comment created time in a month

issue commentistio/istio

ExternalIPs of ingressgateway not effect using helm values

@cwocwo can that be the case you are trying to do below

cat iop.yml 
kind: IstioOperator
spec:
  components:
    ingressGateways:
      - enabled: true
        k8s:
          service:
            type: NodePort
            externalIPs: ["10.110.22.99"]
istioctl manifest generate -f iop.yml | grep externalIPs -B 12 -A 7
apiVersion: v1
kind: Service
metadata:
  annotations: null
  labels:
    app: istio-ingressgateway
    istio: ingressgateway
    release: istio
  name: istio-ingressgateway
  namespace: istio-system
spec:
  externalIPs:
  - 10.110.22.99
  ports: null
  selector:
    app: istio-ingressgateway
    istio: ingressgateway
  type: NodePort
cwocwo

comment created time in a month

issue commentistio/istio

Added environment variable is gone after 1-2 weeks passed

@Arnuphap-Yupuech could you please mention how you have added env variable to the deployment at first place? If you have changed directly on deployment it may gone when run istioctl.

You should add env variable same way how you are installing istio. ex: IstioOperator.

https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#ComponentSpec https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#KubernetesResourcesSpec https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#EnvVar

Arnuphap-Yupuech

comment created time in a month

issue commentistio/istio

Multi-level Wildcard Ordering

IMO; using one gateway for each different domain/multi level of subdomain should solve problem. And it will help to manage separately incase you gonna apply custom filter for each.

Veraticus

comment created time in a month

issue commentistio/istio

Istio multicluster installation timed out

@ECuRyDIN certs are needs to be base64encoded I guess, not decoded when creating secret/tls on Kubernetes (as installation document has examples).

Could you please share steps how you create certs (without sharing your own cert / or creating dummy cert)

ECuRyDIN

comment created time in a month

more