Using kubernetes projectcontour.io with install.istio.io

Question

Pulumi · Accepted Answer

To use Project Contour together with Istio on a Kubernetes cluster using Pulumi, we will need to follow several steps:

1. **Install Project Contour**: Project Contour is an open-source Kubernetes ingress controller that provides a control plane for the Envoy edge and service proxy. It's designed to work with Kubernetes to manage ingress networking resources.

2. **Install Istio**: Istio is a service mesh that provides a way to control how microservices share data with one another. It features powerful routing, load balancing, resiliency, telemetry, and policy enforcement.

Here's a Pulumi TypeScript program that sets up Project Contour and Istio on a Kubernetes cluster:

- We'll use the `kubernetes` package to configure Kubernetes resources with Pulumi.
- We make sure to deploy Contour first since it sets up an ingress controller that Istio can then use.

Here's what each section of the following program does:

1. **Configuration and Initialization**: Prepare the necessary imports and any Kubernetes-specific configuration required for your resources.
2. **Deploy Project Contour**: Apply the Contour Custom Resource Definitions (CRDs) and deploy the Contour ingress controller.
3. **Deploy Istio**: Apply the Istio CRDs and deploy the Istio control plane with the required components.

Please make sure that you have a Kubernetes cluster up and running and that `kubectl` is configured to interact with it. Additionally, ensure Pulumi is set up on your system with the correct context to interact with your Kubernetes cluster.

```typescript
import * as k8s from "@pulumi/kubernetes";

// Create a Kubernetes provider instance that uses our current context in .kube/config
const provider = new k8s.Provider("k8s-provider", { kubeconfig: process.env.KUBECONFIG });

// Apply the Contour Custom Resource Definitions (CRDs)
const contourCrds = new k8s.yaml.ConfigFile("contour-crds", {
    file: "https://projectcontour.io/quickstart/contour.yaml",
}, { provider: provider });

// Once the CRDs are registered, we can deploy Contour itself.
const contour = new k8s.yaml.ConfigFile("contour", {
    file: "https://projectcontour.io/quickstart/contour.yaml",
    dependsOn: [contourCrds],
}, { provider: provider });

// Documenting the Contour ingress IP or hostname to use with Istio
const contourService = contour.getResource("v1/Service", "projectcontour/envoy");

export const contourIngressIp = contourService.status.loadBalancer.ingress[0].ip;
export const contourIngressHost = contourService.status.loadBalancer.ingress[0].hostname;

// Now, let's install Istio.
// Note: Ensure that Istio's version is compatible with the version of Kubernetes your cluster is running.
const istioCrds = new k8s.yaml.ConfigFile("istio-crds", {
    file: "https://github.com/istio/istio/releases/download/1.11.4/istio-1.11.4.yaml",
}, { provider: provider });

// Install Istio itself after the CRDs have been applied
const istio = new k8s.yaml.ConfigFile("istio", {
    file: "https://github.com/istio/istio/releases/download/1.11.4/istio-1.11.4.yaml",
    dependsOn: [istioCrds],
}, { provider: provider});

// Documenting the Istio ingress IP or hostname
const istioIngressService = istio.getResource("v1/Service", "istio-system/istio-ingressgateway");

export const istioIngressIp = istioIngressService.status.loadBalancer.ingress[0].ip;
export const istioIngressHost = istioIngressService.status.loadBalancer.ingress[0].hostname;

// To apply this Pulumi program, run `pulumi up` from the command line.
```

This program will deploy Project Contour and Istio to your Kubernetes cluster. After running `pulumi up`, Pulumi will execute the program and perform actions against your Kubernetes cluster by creating or updating resources.

The `export` keyword is used at the bottom of the script to output the IP address or hostname of the load balancers for Contour and Istio. This allows you to interface Pulumi with other systems, as these values could be used to configure DNS records, for example.

Be sure to replace the URLs in the `file` arguments with the correct URLs for the versions of Project Contour and Istio you wish to install. The provided URLs are just examples and may point to outdated versions—always use the version that is right for your cluster and compatible with all other components.