Files rebasing

06-Envoy/01-envoy_add_headers/README.md

@@ -0,0 +1,42 @@
+https://github.com/istio/istio/wiki/EnvoyFilter-Samples
+
+https://stackoverflow.com/questions/73262158/how-to-apply-envoyfilter-to-sidecar-inbound-and-gateway
+
+
+https://istio.io/latest/docs/reference/config/networking/envoy-filter/
+
+https://discuss.istio.io/t/adding-custom-response-headers-using-istios-1-6-0-envoy-lua-filter/7494
+
+
+
+https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/lua_filter
+
+
+> kubectl logs -f deployments/istiod -n istio-system   
+
+
+
+This somewhat is monitoring, can do cool stuff I don't know how or what to do
+
+
+enable export access logs to stdout
+
+
+istioctl install --set profile=default -y --set meshConfig.accessLogFile=/dev/stdout
+
+
+
+https://istio.io/latest/docs/ops/diagnostic-tools/component-logging/
+
+
+
+
+https://dev.to/aws-builders/understanding-istio-access-logs-2k5o
+
+```yaml
+Note: Here I am using request_handle:logCritical method because default logLevel is WARN for Istio components. request_handle:logInfo can be used, if logLevel is set to Info.
+```
+
+https://youtu.be/yOtEG1luTwU
+
+

06-Envoy/01-envoy_add_headers/deployment.yaml

@@ -0,0 +1,43 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: helloworld
+  labels:
+    app: helloworld
+    service: helloworld
+#  annotations:
+#    sidecar.istio.io/componentLogLevel: info
+spec:
+  ports:
+    - port: 80
+      name: http
+  selector:
+    app: helloworld
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: helloworld-nginx
+  labels:
+    app: helloworld
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: helloworld
+  template:
+    metadata:
+      labels:
+        app: helloworld
+      annotations:
+        sidecar.istio.io/componentLogLevel: lua:info
+    spec:
+      containers:
+        - name: helloworld
+          image: nginx
+          resources:
+            requests:
+              cpu: "100m"
+          imagePullPolicy: IfNotPresent #Always
+          ports:
+            - containerPort: 80

06-Envoy/01-envoy_add_headers/envoy.yaml

@@ -0,0 +1,33 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+  name: envoy-add-response-header
+  namespace: default
+spec:
+  priority:  30
+  workloadSelector:
+    labels:
+      app: helloworld
+  configPatches:
+    - applyTo: HTTP_FILTER
+      match:
+        context: SIDECAR_INBOUND
+        listener:
+          portNumber: 80
+          filterChain:
+            filter:
+              name: "envoy.filters.network.http_connection_manager"
+              subFilter:
+                name: "envoy.filters.http.router"
+      patch:
+        operation: INSERT_BEFORE
+        value:
+          name: envoy.lua
+          typed_config:
+            "@type": "type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua"
+            inlineCode: |
+              function envoy_on_response(response_handle)
+                response_handle:headers():add("numbers", "lots of numbers")
+                response_handle:logInfo("Added header `numbers`")
+                response_handle:logInfo(">>>> Executed `envoy-add-response-header` <<<<")
+              end

06-Envoy/01-envoy_add_headers/envoy2.yaml

@@ -0,0 +1,38 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+  name: envoy-add-response-header2
+  namespace: default
+spec:
+  priority:  40
+  workloadSelector:
+    labels:
+      app: helloworld
+  configPatches:
+    - applyTo: HTTP_FILTER
+      match:
+        context: SIDECAR_INBOUND
+        listener:
+          portNumber: 80
+          filterChain:
+            filter:
+              name: "envoy.filters.network.http_connection_manager"
+              subFilter:
+                name: "envoy.filters.http.router"
+      patch:
+        operation: INSERT_BEFORE
+        value:
+          name: envoy.lua
+          typed_config:
+            "@type": "type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua"
+            inlineCode: |
+              function envoy_on_response(response_handle)
+                response_handle:headers():add("fruit", "watermelons")
+                response_handle:logCritical("Critical: Added header `fruit`")
+                response_handle:logErr("Error: Added header `fruit`")
+                response_handle:logWarn("Warning: Added header `fruit`")
+                response_handle:logInfo("Info: Added header `fruit`")
+                response_handle:logDebug("Debug: Added header `fruit`")
+                response_handle:logTrace("Trace: Added header `fruit`")
+                response_handle:logInfo(">>>> Executed `envoy-add-response-header2` <<<<")
+              end

06-Envoy/01-envoy_add_headers/gateway.yaml

@@ -0,0 +1,36 @@
+# https://github.com/istio/istio/blob/master/samples/helloworld/helloworld-gateway.yaml
+apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  name: helloworld-gateway
+spec:
+  selector:
+    istio: ingressgateway # use istio default controller
+  servers:
+    - port:
+        number: 80
+        name: http
+        protocol: HTTP
+      hosts:
+        - "*"
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: helloworld-vs
+spec:
+  hosts:
+    - "*"
+  gateways:
+    - helloworld-gateway
+  http:
+    - match:
+        - uri:
+            exact: /helloworld
+      route:
+        - destination:
+            host: helloworld
+            port:
+              number: 80
+      rewrite:
+        uri: "/"

06-Envoy/README.md

@@ -0,0 +1,6 @@
+https://youtu.be/yOtEG1luTwU
+
+
+Rate Limit:
+
+https://istio.io/latest/docs/tasks/policy-enforcement/rate-limit/