12 KiB
title | description | weight | aliases | owner | test | |||
---|---|---|---|---|---|---|---|---|
Bookinfo Application | Deploys a sample application composed of four separate microservices used to demonstrate various Istio features. | 10 |
|
istio/wg-docs-maintainers | yes |
This example deploys a sample application composed of four separate microservices used to demonstrate various Istio features.
{{< tip >}} If you installed Istio using the Getting Started instructions, you already have Bookinfo installed and you can skip most of these steps and go directly to Define the service versions. {{< /tip >}}
The application displays information about a book, similar to a single catalog entry of an online book store. Displayed on the page is a description of the book, book details (ISBN, number of pages, and so on), and a few book reviews.
The Bookinfo application is broken into four separate microservices:
productpage
. Theproductpage
microservice calls thedetails
andreviews
microservices to populate the page.details
. Thedetails
microservice contains book information.reviews
. Thereviews
microservice contains book reviews. It also calls theratings
microservice.ratings
. Theratings
microservice contains book ranking information that accompanies a book review.
There are 3 versions of the reviews
microservice:
- Version v1 doesn't call the
ratings
service. - Version v2 calls the
ratings
service, and displays each rating as 1 to 5 black stars. - Version v3 calls the
ratings
service, and displays each rating as 1 to 5 red stars.
The end-to-end architecture of the application is shown below.
{{< image width="80%" link="./noistio.svg" caption="Bookinfo Application without Istio" >}}
This application is polyglot, i.e., the microservices are written in different languages.
It’s worth noting that these services have no dependencies on Istio, but make an interesting
service mesh example, particularly because of the multitude of services, languages and versions
for the reviews
service.
Before you begin
If you haven't already done so, setup Istio by following the instructions in the installation guide.
{{< boilerplate gateway-api-support >}}
Deploying the application
To run the sample with Istio requires no changes to the application itself. Instead, you simply need to configure and run the services in an Istio-enabled environment, with Envoy sidecars injected along side each service. The resulting deployment will look like this:
{{< image width="80%" link="./withistio.svg" caption="Bookinfo Application" >}}
All of the microservices will be packaged with an Envoy sidecar that intercepts incoming and outgoing calls for the services, providing the hooks needed to externally control, via the Istio control plane, routing, telemetry collection, and policy enforcement for the application as a whole.
Start the application services
{{< tip >}} If you use GKE, please ensure your cluster has at least 4 standard GKE nodes. If you use Minikube, please ensure you have at least 4GB RAM. {{< /tip >}}
-
Change directory to the root of the Istio installation.
-
The default Istio installation uses automatic sidecar injection. Label the namespace that will host the application with
istio-injection=enabled
:{{< text bash >}} $ kubectl label namespace default istio-injection=enabled {{< /text >}}
{{< warning >}} If you use OpenShift, make sure to give appropriate permissions to service accounts on the namespace as described in OpenShift setup page. {{< /warning >}}
-
Deploy your application using the
kubectl
command:{{< text bash >}} $ kubectl apply -f @samples/bookinfo/platform/kube/bookinfo.yaml@ {{< /text >}}
{{< warning >}} If you disabled automatic sidecar injection during installation and rely on manual sidecar injection, use the
istioctl kube-inject
command to modify thebookinfo.yaml
file before deploying your application.{{< text bash >}} $ kubectl apply -f <(istioctl kube-inject -f @samples/bookinfo/platform/kube/bookinfo.yaml@) {{< /text >}}
{{< /warning >}}
The command launches all four services shown in the
bookinfo
application architecture diagram. All 3 versions of the reviews service, v1, v2, and v3, are started.{{< tip >}} In a realistic deployment, new versions of a microservice are deployed over time instead of deploying all versions simultaneously. {{< /tip >}}
-
Confirm all services and pods are correctly defined and running:
{{< text bash >}} $ kubectl get services NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE details ClusterIP 10.0.0.31 9080/TCP 6m kubernetes ClusterIP 10.0.0.1 443/TCP 7d productpage ClusterIP 10.0.0.120 9080/TCP 6m ratings ClusterIP 10.0.0.15 9080/TCP 6m reviews ClusterIP 10.0.0.170 9080/TCP 6m {{< /text >}}
and
{{< text bash >}} $ kubectl get pods NAME READY STATUS RESTARTS AGE details-v1-1520924117-48z17 2/2 Running 0 6m productpage-v1-560495357-jk1lz 2/2 Running 0 6m ratings-v1-734492171-rnr5l 2/2 Running 0 6m reviews-v1-874083890-f0qf0 2/2 Running 0 6m reviews-v2-1343845940-b34q5 2/2 Running 0 6m reviews-v3-1813607990-8ch52 2/2 Running 0 6m {{< /text >}}
-
To confirm that the Bookinfo application is running, send a request to it by a
curl
command from some pod, for example fromratings
:{{< text bash >}}
{{< /text >}}kubectl exec "
(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}')" -c ratings -- curl -sS productpage:9080/productpage | grep -o ""
Determine the ingress IP and port
Now that the Bookinfo services are up and running, you need to make the application accessible from outside of your Kubernetes cluster, e.g., from a browser. A gateway is used for this purpose.
-
Create a gateway for the Bookinfo application:
{{< tabset category-name="config-api" >}}
{{< tab name="Istio classic" category-value="istio-classic" >}}
Create an Istio Gateway using the following command:
{{< text bash >}} $ kubectl apply -f @samples/bookinfo/networking/bookinfo-gateway.yaml@ gateway.networking.istio.io/bookinfo-gateway created virtualservice.networking.istio.io/bookinfo created {{< /text >}}
Confirm the gateway has been created:
{{< text bash >}} $ kubectl get gateway NAME AGE bookinfo-gateway 32s {{< /text >}}
Follow these instructions to set the
INGRESS_HOST
andINGRESS_PORT
variables for accessing the gateway. Return here, when they are set.{{< /tab >}}
{{< tab name="Gateway API" category-value="gateway-api" >}}
{{< boilerplate external-loadbalancer-support >}}
Create a Kubernetes Gateway using the following command:
{{< text bash >}} $ kubectl apply -f @samples/bookinfo/gateway-api/bookinfo-gateway.yaml@ gateway.gateway.networking.k8s.io/bookinfo-gateway created httproute.gateway.networking.k8s.io/bookinfo created {{< /text >}}
Because creating a Kubernetes
Gateway
resource will also deploy an associated proxy service, run the following command to wait for the gateway to be ready:{{< text bash >}} $ kubectl wait --for=condition=programmed gtw bookinfo-gateway {{< /text >}}
Get the gateway address and port from the bookinfo gateway resource:
{{< text bash >}}
export INGRESS_HOST=
(kubectl get gtw bookinfo-gateway -o jsonpath='{.status.addresses[0].value}')export INGRESS_PORT=
(kubectl get gtw bookinfo-gateway -o jsonpath='{.spec.listeners[?(@.name=="http")].port}') {{< /text >}}{{< /tab >}}
{{< /tabset >}}
-
Set
GATEWAY_URL
:{{< text bash >}} $ export GATEWAY_URL=$INGRESS_HOST:$INGRESS_PORT {{< /text >}}
Confirm the app is accessible from outside the cluster
To confirm that the Bookinfo application is accessible from outside the cluster, run the following curl
command:
{{< text bash >}}
curl -s "http://
{GATEWAY_URL}/productpage" | grep -o ""
You can also point your browser to http://$GATEWAY_URL/productpage
to view the Bookinfo web page. If you refresh the page several times, you should
see different versions of reviews shown in productpage
, presented in a round robin style (red
stars, black stars, no stars), since we haven't yet used Istio to control the
version routing.
Define the service versions
Before you can use Istio to control the Bookinfo version routing, you need to define the available versions.
{{< tabset category-name="config-api" >}}
{{< tab name="Istio classic" category-value="istio-classic" >}}
Istio uses subsets, in destination rules, to define versions of a service. Run the following command to create default destination rules for the Bookinfo services:
{{< text bash >}} $ kubectl apply -f @samples/bookinfo/networking/destination-rule-all.yaml@ {{< /text >}}
{{< tip >}}
The default
and demo
configuration profiles have auto mutual TLS enabled by default.
To enforce mutual TLS, use the destination rules in samples/bookinfo/networking/destination-rule-all-mtls.yaml
.
{{< /tip >}}
Wait a few seconds for the destination rules to propagate.
You can display the destination rules with the following command:
{{< text bash >}} $ kubectl get destinationrules -o yaml {{< /text >}}
{{< /tab >}}
{{< tab name="Gateway API" category-value="gateway-api" >}}
Unlike the Istio API, which uses DestinationRule
subsets to define the versions of a service,
the Kubernetes Gateway API uses backend service definitions for this purpose.
Run the following command to create backend service definitions for the three versions of the reviews
service:
{{< text bash >}} $ kubectl apply -f @samples/bookinfo/platform/kube/bookinfo-versions.yaml@ {{< /text >}}
{{< /tab >}}
{{< /tabset >}}
What's next
You can now use this sample to experiment with Istio's features for traffic routing, fault injection, rate limiting, etc. To proceed, refer to one or more of the Istio Tasks, depending on your interest. Configuring Request Routing is a good place to start for beginners.
Cleanup
When you're finished experimenting with the Bookinfo sample, uninstall and clean it up using the following command:
{{< text bash >}} $ @samples/bookinfo/platform/kube/cleanup.sh@ {{< /text >}}