ossm3-from-from-scratch

Following official RH documentation

Tested on

Client Version: 4.20.6
Kustomize Version: v5.6.0
Server Version: 4.20.6
Kubernetes Version: v1.33.5

DISPLAY                            VERSION                                
Cluster Observability Operator     1.3.0      
Kiali Operator                     2.17.2    
Red Hat OpenShift GitOps           1.18.2      
Red Hat build of OpenTelemetry     0.140.0-1 
Red Hat OpenShift Service Mesh 3   3.2.1       
Tempo Operator                     0.19.0-1   

Quick Setup

You can manually install each component via the command line (reccomended for first time)

Operators

oc apply -k operators

MinIO (for s3 storage)

oc apply -k minio -n minio

Enable User Monnitoring

oc apply -k observability

Tempo Stack and OpenTelemetry (for distributed Tracing)

oc apply -k  tempoStack-coo/tempoStack
oc apply -k tempoStack-coo/observability-plugin

Service Mesh Istio System

oc apply -k ossm/mesh

Istio Gateway (with gateway-injection)

oc apply -k ossm/gateway-injection

Kiali

oc apply -k kiali

Sample bookinfo App (to test tracing and Kiali)

oc apply -k bookinfo
HOST=$(oc get route istio-ingressgateway -n prod-gateway -o jsonpath='{.spec.host}')
echo productpage URL: https://$HOST/productpage

Bookinfo load generator

export INGRESSHOST=$(oc get route istio-ingressgateway -n prod-gateway -o=jsonpath='{.spec.host}')
cat ./bookinfo/bookinfo-traffic-gen/traffic-generator-configmap.yaml | ROUTE="https://${INGRESSHOST}/productpage" envsubst | oc -n bookinfo apply -f - 
oc apply -f ./bookinfo/bookinfo-traffic-gen/traffic-generator.yaml -n bookinfo

GitOps (ArgoCD)

ArgoCD Applications are found in the gitops directory

Most components can be deployed all at once with the command

oc apply -k gitops

Once everything is up and running, manually install Kiali (WIP)

oc apply -k kiali

There are some instances where the bookinfo and prod-gateway deployments need to restart in order to get into a healthy state.

there is a post-gitops-helper.sh script to ensure they are in a healthy state

sh scripts/post-gitops-helper.sh

This will also ensure proxy-injection for the bookinfo app

Links to sections for more information. Please note that procedures may differ than from above

0. Operator Installation
1. Installing OpenShift Service Mesh 3 components (Operator/Istio/Gateway)
2. Observability Integration
3. A Sample app to test your mesh configuration
4. (Optional) Kubernetes Gateway API setup for ingress
5. A condensed set of end to end steps, based on 0-3

---

Some useful commands

restart every Deployment in a namespace

oc -n <namespace> get deploy -o name | xargs -r -L1 oc -n <namespace> rollout restart

---

TODO:

• cert management
• ambient mode
• Vault integration for object storage credentials