istioctl ambient mode revisiting

 

Installing istio ambident mode on kind didn't work either for windows. It is important to have a linux machine. To get started, run the following command

istioctl install --set profile=ambient --skip-confirmation

Setup kubernetes gateway API - this will install the crds such as gatewayclass, httproute, tcproute and etc

kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.0/standard-install.yaml

Deploying book sample app 

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.24/samples/bookinfo/platform/kube/bookinfo.yaml

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.24/samples/bookinfo/platform/kube/bookinfo-versions.yaml

Then deploy gateway which uses the following yaml 

apiVersion: gateway.networking.k8s.io/v1

kind: Gateway

metadata:

  name: bookinfo-gateway

spec:

  gatewayClassName: istio

  listeners:

  - name: http

    port: 80

    protocol: HTTP

    allowedRoutes:

      namespaces:

        from: Same

---

apiVersion: gateway.networking.k8s.io/v1

kind: HTTPRoute

metadata:

  name: bookinfo

spec:

  parentRefs:

  - name: bookinfo-gateway

  rules:

  - matches:

    - path:

        type: Exact

        value: /productpage

    - path:

        type: PathPrefix

        value: /static

    - path:

        type: Exact

        value: /login

    - path:

        type: Exact

        value: /logout

    - path:

        type: PathPrefix

        value: /api/v1/products

    backendRefs:

    - name: productpage

      port: 9080

Enable ambient mode for a namespace can be setup by running the following codes.

kubectl label namespace default istio.io/dataplane-mode=ambient 

And checking the logs, you will notice that ambient mode is turned on here.

To use a waypoint, you also need to register it using the following commands 

istioctl waypoint apply --enroll-namespace --wait

if you run istioctl waypoint list and istioctl waypoint status, you will get some outputs shown below instead of empty responses.