Add guide to install istio on Huawei CCE (#9051)

content/en/docs/setup/platform-setup/huaweicloud/index.md

@@ -0,0 +1,125 @@
+---
+title: Huawei Cloud
+description: Instructions to setup an Huawei Cloud kubernetes cluster for Istio.
+weight: 23
+skip_seealso: true
+aliases:
+    - /docs/setup/kubernetes/prepare/platform-setup/huaweicloud/
+    - /docs/setup/kubernetes/platform-setup/huaweicloud/
+keywords: [platform-setup,huawei,huaweicloud,cce]
+owner: istio/wg-environments-maintainers
+test: no
+---
+
+Follow these instructions to prepare a cluster for Istio using the
+[Huawei Cloud Container Engine](https://www.huaweicloud.com/intl/product/cce.html).
+You can deploy a Kubernetes cluster to Huawei Cloud quickly and easily in the
+`Cloud Container Engine Console`, which fully supports Istio.
+
+{{< tip >}}
+Huawei offers a {{< gloss >}}managed control plane{{< /gloss >}} add-on for the Huawei Cloud Container Engine,
+which you can use instead of installing Istio manually.
+Refer to [Huawei Application Service Mesh](https://support.huaweicloud.com/istio/)
+for details and instructions.
+{{< /tip >}}
+
+Following the [Huawei Cloud Instructions](https://support.huaweicloud.com/en-us/qs-cce/cce_qs_0008.html) to prepare a cluster before manually installing Istio, proceed as follows:
+
+1.  Log in to the CCE console. Choose **Dashboard** > **Buy Cluster** to open the **Buy Hybrid Cluster** page. An alternative way to open that page is to choose **Resource Management** > **Clusters** in the navigation pane and click **Buy** next to **Hybrid Cluster**.
+
+1.  On the **Configure Cluster** page, configure cluster parameters.
+    In this example, a majority of parameters retain default values. After the cluster configuration is complete, click Next: **Create Node** to go to the node creation page.
+
+    {{< tip >}}
+    Istio release has some requirements for the Kubernetes version,
+    select the version according to Istio's [support policy](/about/supported-releases#supported-releases/).
+    {{< /tip >}}
+
+    The image below shows the GUI where you create and configure the cluster:
+
+    {{< image link="./create-cluster.png" caption="Configure Cluster" >}}
+
+1.  On the node creation page, configure the following parameters
+
+    {{< tip >}}
+    Istio adds some additional resource consumption,
+    from our experience, reserve at least 4 vCPU and 8 GB memory to begin playing.
+    {{< /tip >}}
+
+    The image below shows the GUI where you create and configure the node:
+
+    {{< image link="./create-node.png" caption="Configure Node" >}}
+
+1.  [Configure kubectl](https://support.huaweicloud.com/intl/en-us/cce_faq/cce_faq_00041.html)
+
+1.  Now you can install Istio on CCE cluster according to [install guide](/docs/setup/install).
+
+1.  Configure [ELB](https://support.huaweicloud.com/intl/productdesc-elb/en-us_topic_0015479966.html) to expose Istio ingress gateway if needed.
+
+    - [Create Elastic Load Balancer](https://console.huaweicloud.com/vpc/?region=ap-southeast-1#/elbs/createEnhanceElb)
+
+    - Bind the ELB instance to `istio-ingressgateway` service
+
+      Set the ELB instance ID and `loadBalancerIP` to `istio-ingressgateway`.
+
+{{< text bash >}}
+$ kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    kubernetes.io/elb.class: union
+    kubernetes.io/elb.id: 4ee43d2b-cec5-4100-89eb-2f77837daa63 # ELB ID
+    kubernetes.io/elb.lb-algorithm: ROUND_ROBIN
+  labels:
+    app: istio-ingressgateway
+    install.operator.istio.io/owning-resource: unknown
+    install.operator.istio.io/owning-resource-namespace: istio-system
+    istio: ingressgateway
+    istio.io/rev: default
+    operator.istio.io/component: IngressGateways
+    operator.istio.io/managed: Reconcile
+    operator.istio.io/version: 1.9.0
+    release: istio
+  name: istio-ingressgateway
+  namespace: istio-system
+spec:
+  clusterIP: 10.247.7.192
+  externalTrafficPolicy: Cluster
+  loadBalancerIP: 119.8.36.132     ## ELB EIP
+  ports:
+  - name: status-port
+    nodePort: 32484
+    port: 15021
+    protocol: TCP
+    targetPort: 15021
+  - name: http2
+    nodePort: 30294
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  - name: https
+    nodePort: 31301
+    port: 443
+    protocol: TCP
+    targetPort: 8443
+  - name: tcp
+    nodePort: 30229
+    port: 31400
+    protocol: TCP
+    targetPort: 31400
+  - name: tls
+    nodePort: 32028
+    port: 15443
+    protocol: TCP
+    targetPort: 15443
+  selector:
+    app: istio-ingressgateway
+    istio: ingressgateway
+  sessionAffinity: None
+  type: LoadBalancer
+EOF
+{{< /text >}}
+
+Start playing with Istio by trying out the various [tasks](/docs/tasks).
+