Configure Istio Ingress

Traffic in Istio Ingress is divided into two categories: data plane traffic and control plane traffic. Data plane traffic refers to the messages that the business logic of the workloads sends and receives. Control plane traffic refers to configuration and control messages sent between Istio components to program the behavior of the mesh. Traffic management in Istio refers exclusively to data plane traffic.

To configure Istio Ingress:

  1. Log in to the MKE web UI as an administrator.

  2. In the left-side navigation panel, navigate to <user name> > Admin Settings.

  3. Select Ingress.

  4. In the Kubernetes tab:

    1. Click the HTTP Ingress for Kubernetes disabled slider to enable Istio Ingress.

    2. Configure the proxy to specify how the cluster handles external traffic:

      1. Specify the node ports for the Istio Ingress Gateway Service, where external traffic will be able to enter the cluster. Ensure that the ports are open.

      2. Optional. Click the External IP slider to create a Layer 7 load balancer in front of multiple nodes. You can then add a list of external IP addresses to the Ingress Gateway service.

    3. Configure the replicas to specify how to scale load balancing.

    4. Configure placement rules and load balancer configurations.

    5. Click Save.

  5. Create an Istio Gateway to expose your apps:

    1. In the left-side navigation panel, navigate to Kubernetes > Ingress.

    2. In the Gateways tab, click Create.

    3. Add the server details, including the nodes on which to apply the Gateway configuration. Each entry describes the properties of the proxy on a given load balancer port.

    4. Click Generate YML to create the configuration file.

  6. Click Create.