chore: drops ingress and uses trafficgen.

Author: José Carlos Chávez

examples/istio/Makefile

@@ -53,17 +53,15 @@ patch-envoy-extauthz:
 
 install-istio:
 	@$(ISTIOCTL) install --set profile=demo -c $(KUBECONFIG) -y
-# follows https://medium.com/@s4l1h/how-to-install-kind-and-istio-ingress-controller-3b510834c762
-	@$(KUBECTL) patch deployments.apps -o yaml -n istio-system istio-ingressgateway -p '{"spec":{"template":{"spec":{"containers":[{"name":"istio-proxy","ports":[{"containerPort":8080,"hostPort":80},{"containerPort":8443,"hostPort":443}]}]}}}}'
 
 deploy: install-istio
 	@$(MAKE) -C ../../extauthz docker BUILD_OS=linux BUILD_ARCH=$(BUILD_ARCH) DOCKER_VERSION=example-istio
 	@docker tag ghcr.io/openfga/openfga-extauthz:example-istio ghcr.io/openfga/openfga-extauthz:0.0.1
 	@$(KIND) load docker-image --name $(CLUSTER_NAME) ghcr.io/openfga/openfga-extauthz:0.0.1
 
 	@docker rmi ghcr.io/jcchavezs/httpmole:0.0.1 > /dev/null || true
-	@docker pull --platform=linux/$(BUILD_ARCH) ghcr.io/jcchavezs/httpmole:main
-	@docker tag ghcr.io/jcchavezs/httpmole:main ghcr.io/jcchavezs/httpmole:0.0.1
+	@docker pull --platform=linux/$(BUILD_ARCH) ghcr.io/jcchavezs/httpmole:0.2.0
+	@docker tag ghcr.io/jcchavezs/httpmole:0.2.0 ghcr.io/jcchavezs/httpmole:0.0.1
 	@$(KIND) load docker-image --name $(CLUSTER_NAME) ghcr.io/jcchavezs/httpmole:0.0.1
 
 	@$(KUBECTL) apply -f ./manifests/apps
@@ -78,6 +76,6 @@ destroy-cluster:
 	@$(KIND) delete cluster --name $(CLUSTER_NAME)
 
 kubeconfig:
-	@echo "ACTION REQUIRED: Paste from clipboard in your terminal and hit 'return/enter'"
+	@echo "\nACTION REQUIRED: Paste from clipboard in your terminal and hit 'return/enter'\n"
 	@echo "export KUBECONFIG=\"$(KUBECONFIG)\"" | pbcopy
 

examples/istio/kind-config.yaml

@@ -16,12 +16,8 @@ nodes:
         hostPort: 80
         protocol: TCP
         listenAddress: "0.0.0.0" # Optional, defaults to "0.0.0.0"
-      - containerPort: 8080
-        hostPort: 8080
-        protocol: TCP
-        listenAddress: "0.0.0.0" # Optional, defaults to "0.0.0.0"
       - containerPort: 443
         hostPort: 443
         protocol: TCP
   - role: worker
-  - role: worker
+  - role: worker

examples/istio/manifests/apps/ingress.yaml

@@ -31,7 +31,7 @@ metadata:
 spec:
   ports:
     - name: web
-      port: 10080
+      port: 80
       targetPort: web
   selector:
     app: app-a

examples/istio/manifests/apps/service-a.yaml

@@ -31,7 +31,7 @@ metadata:
 spec:
   ports:
     - name: web
-      port: 10080
+      port: 80
       targetPort: web
   selector:
     app: app-b

examples/istio/manifests/apps/service-b.yaml

@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: trafficgen
+  labels:
+    istio-injection: enabled
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: trafficgenerator
+  namespace: trafficgen
+  labels:
+    app: trafficgenerator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: trafficgenerator
+  template:
+    metadata:
+      labels:
+        app: trafficgenerator
+    spec:
+      containers:
+        - name: trafficgenerator
+          image: appropriate/curl
+          args:
+            - /bin/sh
+            - -c
+            - |
+              while :; do
+                curl -i http://app-a.apps.svc/proxy/app-b.apps.svc
+                sleep 20
+              done

examples/istio/manifests/apps/trafficgen.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: exthauthz-config
+  namespace: openfga
 data:
   config.yaml: |
     server:

examples/istio/manifests/extauthz/configmap.yaml

@@ -35,7 +35,7 @@ spec:
         - image: ghcr.io/openfga/openfga-extauthz:0.0.1
           command:
             - "/envoy-extauthz"
-            - "--config-path"
+            - "--config"
             - "/etc/extauthz/config.yaml"
           imagePullPolicy: IfNotPresent
           name: extauthz