Accessing Services Inside the Mesh from External Applications¶

This page explains how external applications can access services inside the mesh through configuration.

Prerequisites:

• The service bookinfo.com is running in the default namespace of the mesh global-service.

• The mesh provides an ingressgateway gateway instance.

Objective: Expose the internal service bookinfo.com to the outside.

1. Use URI matching to route external application access to specific pages of the bookinfo.com service.

   

2. Click Traffic Management -> Gateway Rules -> Create to create a gateway rule for the Istio gateway and expose the service and ports externally.

   

   Here is an example YAML after completing the configuration:

   apiVersion: networking.istio.io/v1beta1
   kind: Gateway
   metadata:
     name: bookinfo-gateway
   spec:
     selector:
       istio: ingressgateway # Use the default controller
     servers:
     - port:
         number: 80
         name: http
         protocol: HTTP
       hosts:
       - bookinfo.com
   

3. Click OK to return to the gateway rule list, where you will see a successful creation message.

4. Click Traffic Management -> Virtual Services -> Create to create a routing rule that routes based on the URI in the request to the specified pages.

   

   Here is an example YAML after completing the configuration:

   apiVersion: networking.istio.io/v1beta1
   kind: VirtualService
   metadata:
     name: bookinfo
   spec:
     hosts:
     - bookinfo.com
     gateways:
     - bookinfo-gateway
     http:
     - match:
         - uri:
             exact: /productpage
         - uri:
             exact: /login
         - uri:
             exact: /logout
         - uri:
             prefix: /api/v1/products
       route:
       - destination:
           host: productpage
           port:
             number: 9080
   

5. Click OK to return to the virtual service list, where you will see a successful creation message.

Comments