Kubernetes Service Mesh Adoption (istio)


#1

It’s going to be important going forward that Spinnaker’s implementation around Kubernetes can also deal with “Service Mesh” constructs like Istio. I think it would be good to get some discussion started and scoping around how best we can integrate that within this ecosystem. I’m not sure the V2 provider will really be able to solve this directly unless there’s something I may have missed. Let me know what you all think.


#2

Why wouldn’t the v2 provider be able to solve this? Istio relies on kubernetes manifest definitions to deploy the service mesh, as well as sidecars for all of your services. Those sidecars can either be injected as config, or by the Kubernetes master.

What’s interesting is what kind of best-practices or orchestrations we can promote. e.g. How do we integrate Spinnaker’s auth model with Istio’s? Do we surface traffic splitting as a first class operation, or do we have users always define these by hand? etc…


#3

Ok, that makes sense.


#4

Oooh a staged rollout that took advantage of Istio’s traffic shaping would be super cool.


#5

I also think having this integrated to allow shaping traffic would be cool/nice. I was toying with a manual approach to using Linkerd with spinnaker since thats what we use .


#6

Do you mind sharing your linkerd rollouts @camechis? Even at a high level, I’d love to see what these deployments look like.


#7

I haven’t implemented it yet but as soon as I get a chance to try it out I will give a break down


#8

We are interested in contributing to this effort. Would love to set up a meeting to discuss the effort involved. Who are the right people for us to contact?


#9

An integration with istio would be awesome.


#10

Right now we’re waiting to see how people use Istio with the Kubernetes v2 provider without additional Istio-specific support. If we see clear patterns emerge, or you have any suggestions for how the integration can be made stronger (by injecting the right Istio configuration, surfacing data provided by Istio in Spinnaker, or something we haven’t thought of) sharing here is a great place to get started.

To be clear, the new Kubernetes v2 provider (in early alpha the next week or so) allows you to deploy Istio manifests as they are just custom Kubernetes resources. Maybe it’ll be the case that this is a deep enough integration (but that doesn’t seem likely).


#11

Really looking forward to istio can be integrated.This is a very good experience.