Tetrate Service Bridge Sandbox

Deploy Tetrate Service Bridge Demo on Azure Kubernetes Service (AKS) and Elastic Kubernetes Service (EKS) using Terraform

The intention is to create azure-go-to demo... from deploying MP and CP using helm til having an application demo setup using standard and gitops approach...and of course variablize the world "completely" is work in progress...

The Makefile in this directory provides automated provisioning of k8s clusters with TSB installed on Azure.

  graph TD;
      A[make azure_k8s] --> B[make tsb_deps]
      AA[make aws_k8s] --> D[make tsb_cp]
      B[make tsb_deps] --> C[make tsb_mp]
      Y[make azure_oidc] --> C[make tsb_mp]
      C[make tsb_mp] --> D[make tsb_cp]
      C[make tsb_mp] --> F[make keycloak]
      D[make tsb_cp] --> E[make argocd]
      D[make tsb_cp] --> Z[make app_bookinfo]
      style Z fill:lightgrey
      style Y fill:lightgrey
      style E fill:lightgrey
      style F fill:lightgrey

Loading

The setup consists of

• module.azure_base - deploys resource group, vnet and acr

• module.azure_jumpbox - deploys jumpbox, pushes tsb repo to acr

• module.azure_k8s - deploys k8s cluster for MP and N-number of CPs(*) leveraging AKS

• module.es - deploys ECK on MP k8s cluster

• module.cert-manager - deploys cert-manager on MP k8s cluster

• module.argocd - deploys argoCD bookinfo demo app using ArgoCD with related TSB components grpc demo app using ArgoCD with related TSB components

• module.keycloak-helm - deploys keycloak

• module.keycloak-provider - configs keycloak for JWT-based external authorization demo

• module.app_bookinfo - deploys bookinfo

• module.tsb_mp - responsible for TSB MP setup using Helm chart

• module.tsb_cp - responsible for TSB CP setup using Helm chart

• module.aws_dns - responsible for TSB Public FQDN setup

Requirements

• terraform >= 1.0.0
• configured and assumed Azure role
• configured and assumed AWS role

Usage

terraform.tfvars

name_prefix = "juggles"
location    = "eastus"
cidr        = "172.20.0.0/16"
tsb_image_sync_username = "cloudsmith-apikey"
tsb_image_sync_apikey   = "cloudsmith-username"
tsb_helm_username       = "cloudsmith-apikey"
tsb_helm_password       = "cloudsmith-username"
tsb_fqdn            = "mtoa.cx.tetrate.info"
tsb_version         = "1.5.0-internal-rc2"
tsb_password        = "Tetrate123"
app_clusters_count  = "1"

To stand up the demo continue with the steps below:

# setup underlying clusters
make azure_k8s
# deploy TSB dependecies such as elastic, cert-manager
make tsb_deps
# deploy TSB MP using Helm chart
make tsb_mp
# deploy TSB CP using Helm chart
make tsb_cp cluster_id=0
make tsb_cp cluster_id=1
# (optional) deploy ArgoCD
make argocd cluster_id=0
make argocd cluster_id=1

The completion of the above steps will result in:

• output TSB management plane endpoint
• output kubeconfig files for all the created aks clusters in format of: $cluster_name-kubeconfig
• output IP address and private key for the jumpbox (ssh username: tsbadmin)

ArgoCD

• deploys bookinfo app under gitops-bookinfo namespace and exposes it over the ingress gateway as gitops-bookinfo.tetrate.io
• argocd is exposed using LoadBalancer type k get svc -n argocd argo-cd-argocd-server, the username is admin and password is the specified TSB admin password

When you are done with the environment, you can destroy it by running:

make destroy

Usage notes

• Terraform destroys only the resources it created.
• Terraform stores the state locally
• variablize the world "completely" is work in progress...