kiali | Kiali project , observability for the Istio service mesh | Service Mesh library
kandi X-RAY | kiali Summary
kandi X-RAY | kiali Summary
Kiali provides answers to the questions: What microservices are part of my Istio service mesh and how are they connected?.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of kiali
kiali Key Features
kiali Examples and Code Snippets
Community Discussions
Trending Discussions on kiali
QUESTION
I managed to install kubernetes 1.22, longhorn, kiali, prometheus and istio 1.12 (profile=minimal) on a dedicated server at a hosting provider (hetzner).
I then went on to test httpbin with an istio ingress gateway from the istio tutorial. I had some problems making this accessible from the internet (I setup HAProxy to forward local port 80 to the dynamic port that was assigned in kubernetes, so port 31701/TCP in my case)
How can I make kubernetes directly available on bare metal interface port 80 (and 443).
I thought I found the solution with metallb but I cannot make that work so I think it's not intended for that use case. (I tried to set EXTERNAL-IP to the IP of the bare metal interface but that doesn't seem to work)
My HAProxy setup is not working right now for my SSL traffic (with cert-manager on kubernetes) but before I continue looking into that I want to make sure. Is this really how you are suppose to route traffic into kubernetes with an istio gateway configuration on bare metal?
I came across this but I don't have an external Load Balancer nor does my hosting provider provide one for me to use.
...ANSWER
Answered 2021-Dec-14 at 09:31Posted community wiki answer for better visibility based on the comment. Feel free to expand it.
The solution for the issue is:
I setup HAProxy in combination with Istio gateway and now it's working.
The reason:
I think the reason why SSL was not working was because istio.io/latest/docs/setup/additional-setup/gateway creates the ingress gateway in a different namespace (
istio-ingress
) from the rest of the tutorials (istio-system
).
QUESTION
I have started to read Istio-in-action (by Manning) and Mastering-service-mesh (by Packt) and there are some examples where I cannot 'see' the right output. I work on my laptop with Ubuntu 20.04 and I use [kind] for my local k8s cluster where I can create 3 or more worker-nodes.
When I deploy some Istio resources (e.g. virtual service) I would like to browse the service-mesh from my Ubuntu browser or from a different client (either a different laptop or cell phone) but it misses something in my 'infrastructure'- is it the external load balancer or some local Ubuntu configuration? Is it mandatory to work with a public cloud provider - GCP/AWS/Azure ; if Yes, which one is the most simple? I have tried with kubectl port-forward
but without success.
Other resources are ok (e.g. istioctl dashboard kiali/jaeger/prometheus) even without an ExternalIP.
Could you help me to find a blog or a tutorial/hint/advice about the necessary elements for browsing the k8s/Istio services from the internet?
Thank you in advance!
...ANSWER
Answered 2021-Oct-13 at 18:46When installing istio with the istio-ingressgateway enabled a service with that name is created in the istio-system
namespace.
QUESTION
I would like to overwrite the source_workload tag in the request_bytes_bucket metric due to high cardinality issues generated by a specific workload - I do not want to drop the source_workload tag as that will break Kiali functionality and affect other workloads that do not have this issue - I've tried using the following definition but this does not seem to be working, there doesnt appear to be many examples so I'm not sure if a ternary or regex can be used in this scenario:
...ANSWER
Answered 2021-Sep-30 at 09:30To get this working I had to drop the 'istio' prefix, the 'bucket' suffix and add an additional set of single quotes around the value e.g.
QUESTION
I have my dashboards exposed to .foobar.com
with no problem, now I am trying to expose dashboards mentioned above to www.foobar.com/dashboard/
I have tested with a simple .net backend container with this VS set up:
ANSWER
Answered 2021-Apr-22 at 18:59For anyone has the same question, please take a look here:
I have this resolved:
So first, the VirtualSerive are correct, but remember to add quotes to write section:
QUESTION
I'm new to Terraform. I need to set up Istio on the AWS EKS cluster. I thought of using Istio-Operator along with Terraform to do the same.
Below is the shell script to install Istio on EKS using Istio-Operator:
install-istio.sh
...ANSWER
Answered 2021-Apr-15 at 13:27I believe you will encounter problems if using a local-exec provisioner like this.
Terraform does not play nice with resources it cannot reconcile. Especially when it comes to CRDs. Also, every time you will run terraform apply
, you will run istioctl init
over and over, which is probably not what you want.
What you can do, is to
- convert the istio-operator to standard kubernetes manifests using
QUESTION
I'm new to Terraform and Helm world! I need to set up Istio on the AWS EKS cluster. I'm trying to install Istio on top of EKS cluster using Terraform and Helm as a provider: Below is the terraform code for the same:
...ANSWER
Answered 2021-Apr-13 at 11:02yes, you have to create the IAM role also if you want to create it for workers you can also create the IAM for the same.
QUESTION
Hey it's been quite days struggling to make the sample book app running. I am new to istio and trying to get understand it. I followed this demo of an other way of setting up the bookinfo. I am using minikube in a virtualbox machine with docker as a driver. I set metalLB as a loadBalancer for ingress-gateway, here is the configmap i used for metalLB :
...ANSWER
Answered 2021-Mar-22 at 11:41In my opinion, this is a problem with the MetalLB
configuration.
You are trying to give MetalLB
control over IPs from the 192.168.49.2/28
network.
We can calculate for 192.168.49.2/28
network: HostMin=192.168.49.1
and HostMax=192.168.49.14
.
As we can see, your istio-ingressgateway
LoadBalancer Service is assigned the address 192.168.49.0
and I think that is the cause of the problem.
I recommend changing from 192.168.49.2/28
to a range, such as 192.168.49.10-192.168.49.20
.
I've created an example to illustrate you how your configuration can be changed.
As you can see, at the beginning I had the configuration exactly like you (I also couldn't connect to the server using the curl
command):
QUESTION
I'm trying to run istioctl install istio-config.yaml
command within CodeBuild on AWS but I get this error:
error installer PersistentVolumeClaim "istio-jaeger-pvc" is invalid: spec.resources.requests.storage: Forbidden: field can not be less than previous value
even though I don't have the path spec.resources.requests.storage
in my configuration file!
This is the content of my file:
ANSWER
Answered 2021-Mar-11 at 14:09The solution for this one is to simply increase the memory size in the istio-config.yaml
file.
in my case, I'm updating the PVC and it looks like it's already filled with data and decreasing it wasn't an option for istio, so I increased it in the config file instead:
QUESTION
I recently enabled RBAC at Kubernetes. Since than, Jenkins (running on Kubernetes, creating agent-pods on the very same Kubernetes) is able to create agent-pods, but is unable to connect to JNLP via Port 50'000.
I noticed a reference for Connecting to jenkins.example.de:50000
, but did not find where this is configured, as it must resolve Kubernetes-Internal (Kube-DNS), as the port is not exposed from outside.
I noticed (and updated) configuration at Configure System
> Jenkins Location
> Jenkins URL
, leading to failed RBAC logins (Keycloak), as redirect URL is set incorrectly. Futher it does not feel correct for configuring cluster-internal endpoints for JNLP. I can chose between JNLP being able to work with cluster-internal URL or Being able to login, using RBAC:
- How to configure Jenkins URL correclty? (https:(jenkins.example.com?)
- How to configure Jenkins JNLP correclty (jenkins-svc.jenkins.cluster.local:50000)? Where to do so?
ANSWER
Answered 2021-Jan-09 at 15:46Found the answer. Istio
was delaying connectivity of JNLP
. Details on Github Issue #146. Further, Jenkins URL
and Jenkins Tunnel
must be configured (otherwise it fails, see Github Issue #788):
Two solutions:
- Disable
Istio
- Create your own custom
JNPLP
image, utilizing delay / retry (graceful degradation). None is provided since February 2020.
QUESTION
I installed Istion version 1.6.9 with below steps
...ANSWER
Answered 2020-Sep-14 at 06:44Just run istioctl dashboard kiali
.
Istioctl will create a proxy. Now log in with admin/admin credentials.
To answer the second question: Istio is running on your cluster and is configure with istioctl, installed on your bastion.
By labeling a namespace with istio-injection=enabled
the sidecar will be injected automatically. If necessary, you can disable the injection for a pod by annotating it like this:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install kiali
Please, complement the content of this readme document with the README.adoc document of the front-end repository. Although this document has some instructions about building the front-end, they are not complete.
The Go Programming Language Currently, Kiali releases are built using Go 1.16. Although Kiali may build correctly using other versions of Go, it’s suggested to use version 1.16.2 for development to ensure replicatable builds. Makefiles will require this minimum version of Go.
git
Docker or Podman If you are using podman declare the environment variable DORP=podman.
NodeJS (Node.js >= 12.22.0 && <16 with the NPM command)
The GNU make utility or any of it’s alternatives
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page