Home / user-1082395

Sotiris Sotiriou's questions

Martin Hope
Sotiris Sotiriou
Asked: 2024-10-22 02:33:11 +0800 CST
  • 6

I have already installed Istio Ingress Gateway in my AKS cluster using Helm (charts used istio/base, istio/istiod, istio/gateway from https://istio-release.storage.googleapis.com/charts).

Now I want to install also an Istio Egress Gateway, but I don't know if there is another Helm chart or if I have to install again the istio/gateway and configure it as Egress.

Can anyone help me with this because there is not a clear installation guide using Helm in istio documentation?

What should I install and configure to route all the cluster traffic through this Egress Gateway and restrict access to specific hosts for every workload. e.g.

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: external-svc-https
  namespace: testing
spec:
  hosts:
  - api.dropboxapi.com
  - www.googleapis.com
  - api.facebook.com
  location: MESH_EXTERNAL
  exportTo: "."
  ports:
  - number: 443
    name: https
    protocol: TLS
  resolution: NONE

I already found a way to allow access only to specific hosts per namespace using ServiceEntry and changing the following configuration to istiod installation.

meshConfig:
  outboundTrafficPolicy:
    mode: REGISTRY_ONLY
kubernetes