All Projects → cloudfoundry → cf-k8s-networking

cloudfoundry / cf-k8s-networking

Licence: Apache-2.0 license
building a cloud foundry without gorouter....

Programming Languages

go
31211 projects - #10 most used programming language
shell
77523 projects
Dockerfile
14818 projects
Makefile
30231 projects
HTML
75241 projects

Projects that are alternatives of or similar to cf-k8s-networking

Istio Vet
Utility for validating Istio configuration in kubernetes cluster
Stars: ✭ 126 (+281.82%)
Mutual labels:  service-mesh, istio
Kiali
Kiali project, observability for the Istio service mesh
Stars: ✭ 2,687 (+8042.42%)
Mutual labels:  service-mesh, istio
Layer5
Layer5, the service mesh company, representing every service mesh
Stars: ✭ 137 (+315.15%)
Mutual labels:  service-mesh, istio
Micro Mesh
gRPC微服务架构实践
Stars: ✭ 50 (+51.52%)
Mutual labels:  service-mesh, istio
service-mesh-patterns
Templates of service mesh configurations imbued with best practices.
Stars: ✭ 68 (+106.06%)
Mutual labels:  service-mesh, istio
Workshop Material
Material for Kubernetes and Istio workshop https://learnistio.com
Stars: ✭ 113 (+242.42%)
Mutual labels:  service-mesh, istio
Istio Service Mesh Workshop
Using Istio Workshop
Stars: ✭ 194 (+487.88%)
Mutual labels:  service-mesh, istio
Meshery
Meshery, the service mesh management plane
Stars: ✭ 608 (+1742.42%)
Mutual labels:  service-mesh, istio
eirini-release
Helm release for Project Eirini
Stars: ✭ 37 (+12.12%)
Mutual labels:  cloudfoundry, eirini
Istio By Example Java
A collection of examples of using Istio with Java applications.
Stars: ✭ 242 (+633.33%)
Mutual labels:  service-mesh, istio
Learn Istio
⛵️ Istio resources 🕸
Stars: ✭ 1,025 (+3006.06%)
Mutual labels:  service-mesh, istio
istio-talk
A talk on Istio and related demos
Stars: ✭ 11 (-66.67%)
Mutual labels:  service-mesh, istio
Istio Bench
A benchmark tool for Istio. It measures CPU, Memory, Network usage of istio per number of services
Stars: ✭ 20 (-39.39%)
Mutual labels:  service-mesh, istio
Istio Handbook
Istio Service Mesh Advanced Practical - Istio服务网格进阶实战 https://www.servicemesher.com/istio-handbook/
Stars: ✭ 1,646 (+4887.88%)
Mutual labels:  service-mesh, istio
Pitstop
This repo contains a sample application based on a Garage Management System for Pitstop - a fictitious garage. The primary goal of this sample is to demonstrate several software-architecture concepts like: Microservices, CQRS, Event Sourcing, Domain Driven Design (DDD), Eventual Consistency.
Stars: ✭ 708 (+2045.45%)
Mutual labels:  service-mesh, istio
Naftis
An awesome dashboard for Istio built with love.
Stars: ✭ 1,859 (+5533.33%)
Mutual labels:  service-mesh, istio
Istio Operator
An operator that manages Istio deployments on Kubernetes
Stars: ✭ 482 (+1360.61%)
Mutual labels:  service-mesh, istio
Istio Knowledge Map
Istio knowledge map 知识图谱
Stars: ✭ 526 (+1493.94%)
Mutual labels:  service-mesh, istio
Istio Official Translation
Istio官网中文本地化
Stars: ✭ 225 (+581.82%)
Mutual labels:  service-mesh, istio
advanced-istio-service-mesh-workshop
Advanced Istio Service Mesh Workshop
Stars: ✭ 28 (-15.15%)
Mutual labels:  service-mesh, istio

cf-k8s-networking

Routing and networking for Cloud Foundry running on Kubernetes.

Deploying

CF-K8s-Networking is a component of CF-for-K8s. To deploy CF-for-K8s reference the following documentation:

Architecture

Architecture Diagram of CF-K8s-Networking

  • RouteController: Watches the Kubernetes API for Route CRs and translates the Route CRs into Istio Virtual Service CRs and Kubernetes Services accordingly to enable routing to applications deployed by Cloud Foundry.

  • Istio: CF-K8s-Networking currently depends on Istio.

    • Istio serves as both our gateway router for ingress networking, replacing the role of the Gorouters in CF for VMs, and service mesh for (eventually) container-to-container networking policy enforcement.
    • We provide a manifest for installing our custom configuration for Istio, here.
    • Istio provides us with security features out of the box, such as:
      • Automatic Envoy sidecar injection for system components and application workloads
      • Sidecar Kubernetes resources that can limit egress traffic from workload Pods
      • Transparent mutual TLS (mTLS) everywhere
      • (Eventually) app identity certificates using SPIFFE issued by Istio Citadel
    • Istio should be treated as an "implementation detail" of the platform and our reliance on it is subject to change
    • Istio config is located in cf-for-k8s and it's managed by the cf-k8s-networking team.

Contributing

For information about how to contribute, develop against our codebase, and run our various test suites, check out our Contributing guidelines.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].