Alibaba Cloud Service Mesh:Integrate an ALB instance with an ingress gateway

Step 1: Deploy a sample application

Connect to the cluster based on the content in the kubeconfig file of the cluster on the data plane and then run the following command to deploy the Bookinfo application. For more information, see Deploy an application in an ASM instance.

kubectl apply -f https://raw.githubusercontent.com/istio/istio/master/samples/bookinfo/platform/kube/bookinfo.yaml

Step 2: Create Istio resources

In this example, an Istio gateway and a virtual service are created for testing.

1. Create an Istio gateway.

   1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

   2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Gateways > Gateway.

   3. On the Gateway page, click Create and configure the parameters shown in the following figure.

      

   4. In the lower part of the Create page, click Preview to view the YAML file of the Istio gateway. After you confirm the information in the YAML file, click Submit. In the lower part of the Create page, click Create.

      Show the YAML file

      apiVersion: networking.istio.io/v1beta1
      kind: Gateway
      metadata:
        name: bookinfo-gateway
        namespace: default
      spec:
        selector:
          istio: ingressgateway
        servers:
          - port:
              number: 80
              name: http
              protocol: HTTP
            hosts:
              - '*'

2. Create a virtual service and configure traffic routing.

   1. On the details page of the ASM instance, choose Traffic Management Center > VirtualService in the left-side navigation pane.

   2. On the VirtualService page, click Create to configure a virtual service for the bookinfo-gateway gateway.

      

   3. In the lower part of the Create page, click Preview to view the YAML file of the virtual service. After you confirm the information in the YAML file, click Submit. In the lower part of the Create page, click Create.

      Show the YAML file

      apiVersion: networking.istio.io/v1beta1
      kind: VirtualService
      metadata:
        name: bookinfo
        namespace: default
      spec:
        gateways:
          - bookinfo-gateway
        hosts:
          - '*'
        http:
          - match:
              - uri:
                  exact: /productpage
              - uri:
                  prefix: /static
              - uri:
                  exact: /login
              - uri:
                  exact: /logout
              - uri:
                  prefix: /api/v1/products
            route:
              - destination:
                  host: productpage
                  port:
                    number: 9080
                              

Step 3: Create an AlbConfig object

Scenario 1: You need to integrate an existing standard ALB instance with the ingress gateway

1. Obtain the ID of the ALB instance in the ALB console.

2. Create an alb-demo.yaml file that contains the following content.

   Replace the value of id in the config section with the ID of your ALB instance.

   apiVersion: alibabacloud.com/v1
   kind: AlbConfig
   metadata:
     name: default
   spec:
     config:
       id: alb-xxxxx 
       forceOverride: false

3. Run the following command to create an AlbConfig object:

   kubectl apply -f alb-demo.yaml

Scenario 2: You need to create an ALB instance and integrate it with the ingress gateway

1. Create an alb-demo.yaml file that contains the following content. For more information, see Access Services by using an ALB Ingress.

   Set the name of the automatically created ALB instance to alb-demo.

   apiVersion: alibabacloud.com/v1
   kind: AlbConfig
   metadata:
     name: default
   spec:
     config:
       name: alb-demo
       addressType: Internet
       zoneMappings:
       - vSwitchId: vsw-uf6ccg2a9g71hx8go****
       - vSwitchId: vsw-uf6nun9tql5t8nh15****

   Parameter	Description
   spec.config.name	The name of the ALB instance that you want to create.
   addressType	The type of IP address that the ALB instance uses to provide services. This parameter is required. Valid values: Internet: The ALB instance uses a public IP address. The domain name of the Ingress is resolved to the public IP address of the ALB instance. Therefore, the ALB instance is accessible over the Internet. This is the default value. Intranet: The ALB instance uses a private IP address. The domain name of the Ingress is resolved to the private IP address. Therefore, the ALB instance is accessible only within the virtual private cloud (VPC) where the ALB instance is deployed.
   zoneMappings	The IDs of the vSwitches that are used by the ALB Ingress. You must specify at least two vSwitch IDs and the vSwitches must be deployed in different zones. The zones of the vSwitches must be supported by ALB Ingresses. This parameter is required. For more information about the regions and zones that are supported by ALB Ingresses, see Supported regions and zones. For more information about how to create a vSwitch, see Create and manage a vSwitch.

2. Run the following command to create an AlbConfig object:

    kubectl apply -f alb-demo.yaml

Step 4: Create an IngressClass resource

1. Create an alb.yaml file that contains the following content:

   apiVersion: networking.k8s.io/v1
   kind: IngressClass
   metadata:
     name: alb
   spec:
     controller: ingress.k8s.alibabacloud/alb
     parameters:
       apiGroup: alibabacloud.com
       kind: AlbConfig
       name: default
       scope: Cluster

2. Run the following command to create an IngressClass resource:

   kubectl apply -f alb.yaml

   Expected output:

   ingressclass.networking.k8s.io/alb created

Step 5: Create an Ingress instance

The ingress gateway is created in the istio-system namespace. You need to create an Ingress instance in the istio-system namespace in the ACK cluster on the data plane. The port number is 80, which is the same as that specified when you create the ingress gateway.

1. Create an asm-gateway-ingress.yaml file that contains the following content:

   apiVersion: networking.k8s.io/v1
   kind: Ingress
   metadata:
     name: asm-gateway-ingress
     namespace: istio-system
   spec:
     ingressClassName: alb
     rules:
     - http:
         paths:
         - backend:
             service:
               name: istio-ingressgateway
               port:
                 number: 80
           path: /*
           pathType: ImplementationSpecific
                   

2. Run the following command to create an Ingress instance:

   kubectl apply -f asm-gateway-ingress.yaml

Step 6: Access the ingress gateway

1. Run the following command to query the endpoint of the Ingress instance:

   kubectl get ing -n istio-system

   Expected output:

   NAME                  CLASS   HOSTS   ADDRESS                                               PORTS   AGE
   asm-gateway-ingress   alb     *       alb-xxxx.xxxx.alb.aliyuncs.com                        80      18h

   In the output, you can see that the endpoint of the Ingress instance is alb-xxxx.xxxx.alb.aliyuncs.com.

2. Access the ingress gateway by using one of the following methods:

   • Method 1: Enter http://alb-xxxx.xxxx.alb.aliyuncs.com/productpage in a browser to access the ingress gateway. alb-xxxx.xxxx.alb.aliyuncs.com is the endpoint of the Ingress instance obtained in the previous step.

   • Method 2: Log on to the ALB console to obtain the public IP address of the ALB instance and use it to access the ingress gateway. If the ALB instance is bound to a domain name, you can use the domain name to access the ingress gateway.

References

Work with Terway