initial commit

testapp/db/Dockerfile

@@ -0,0 +1,15 @@
+FROM golang:alpine
+ARG VERSION
+RUN mkdir /build 
+ADD . /build/
+WORKDIR /build 
+RUN CGO_ENABLED=0 GOOS=linux go build -a -gcflags '-e' -ldflags "-X main.version=$VERSION -s -w" -o main .
+RUN echo -e "root:x:0:0:root:/:\nappuser:x:1000:1000:appuser:/:" > /etc/passwd
+RUN echo -e "root:x:0:root\nappuser:x:1000:" > /etc/group
+FROM scratch
+COPY --from=0 /build/main /
+COPY --from=0 /etc/passwd /etc/
+COPY --from=0 /etc/group /etc/
+USER appuser
+EXPOSE 8080
+ENTRYPOINT ["/main"]

testapp/db/Makefile

@@ -0,0 +1,13 @@
+CC=docker
+APP=db
+TAG=127.0.0.1:5000/testapp/$(APP):$(VERSION)
+
+all: build push
+
+build:
+	$(CC) build --build-arg VERSION=$(VERSION) -t $(TAG) .
+
+push:
+	$(CC) push $(TAG)
+
+.PHONY: build push

testapp/db/db-v2.yaml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: testapp-db-v2
+  labels:
+    app: testapp-db
+    version: v2
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: testapp-db
+      version: v2
+  template:
+    metadata:
+      labels:
+        app: testapp-db
+        version: v2
+    spec:
+      containers:
+      - name: testapp-db
+        image: 127.0.0.1:5000/testapp/db:v2
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: testapp-db
+  labels:
+    app: testapp-db
+spec:
+  ports:
+  - port: 8080
+    name: http
+  selector:
+    app: testapp-db

testapp/db/db.yaml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: testapp-db
+  labels:
+    app: testapp-db
+    version: v1
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: testapp-db
+      version: v1
+  template:
+    metadata:
+      labels:
+        app: testapp-db
+        version: v1
+    spec:
+      containers:
+      - name: testapp-db
+        image: 127.0.0.1:5000/testapp/db:v1
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: testapp-db
+  labels:
+    app: testapp-db
+spec:
+  ports:
+  - port: 8080
+    name: http
+  selector:
+    app: testapp-db

testapp/db/istio-deny.yaml

@@ -0,0 +1,24 @@
+apiVersion: "config.istio.io/v1alpha2"
+kind: denier
+metadata:
+  name: deny-testapp-db
+spec:
+  status:
+    code: 7
+    message: Not allowed
+---
+apiVersion: "config.istio.io/v1alpha2"
+kind: checknothing
+metadata:
+  name: deny-testapp-db
+spec:
+---
+apiVersion: "config.istio.io/v1alpha2"
+kind: rule
+metadata:
+  name: deny-testapp-db
+spec:
+  match: destination.labels["app"] == "testapp-db"
+  actions:
+  - handler: deny-testapp-db.denier
+    instances: [ deny-testapp-db.checknothing ]

testapp/db/main.go

@@ -0,0 +1,59 @@
+package main
+
+import (
+	"fmt"
+	"io/ioutil"
+	"log"
+	"net"
+	"net/http"
+	"os"
+	"time"
+)
+
+var version string
+
+func get(c *http.Client, url string) (body string, err error) {
+	resp, err := c.Get(url)
+	if err != nil {
+		return
+	}
+	defer resp.Body.Close()
+	b, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return
+	}
+	body = string(b)
+	return
+}
+
+func main() {
+	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
+		log.Printf("%s %s %s", r.RemoteAddr, r.Method, r.URL)
+		h, err := os.Hostname()
+		if err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+			return
+		}
+		c := &http.Client{Transport: &http.Transport{
+			DialContext: (&net.Dialer{
+				Timeout: 5 * time.Second,
+			}).DialContext,
+		}}
+		body, err := get(c, "http://testapp-api:8080/healthz")
+		if err != nil {
+			body = err.Error()
+		}
+		fmt.Fprintf(w, "%s (%s) API Health: '%s'", h, version, body)
+	})
+	http.HandleFunc("/healthz", func(w http.ResponseWriter, r *http.Request) {
+		log.Printf("%s %s %s", r.RemoteAddr, r.Method, r.URL)
+		fmt.Fprintf(w, "db: ok")
+	})
+	s := &http.Server{
+		ReadTimeout:  5 * time.Second,
+		WriteTimeout: 10 * time.Second,
+		IdleTimeout:  120 * time.Second,
+		Addr:         ":8080",
+	}
+	log.Fatal(s.ListenAndServe())
+}

testapp/db/route.yaml

@@ -0,0 +1,34 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: testapp-db
+spec:
+  hosts:
+  - testapp-db.default.svc.cluster.local
+  http:
+  - route:
+    - destination:
+        host: testapp-db.default.svc.cluster.local
+        subset: v1
+      weight: 50
+    - destination:
+        host: testapp-db.default.svc.cluster.local
+        subset: v2
+      weight: 50
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: DestinationRule
+metadata:
+  name: testapp-db
+spec:
+  host: testapp-db.default.svc.cluster.local
+  trafficPolicy:
+    loadBalancer:
+      simple: RANDOM
+  subsets:
+  - name: v1
+    labels:
+      version: v1
+  - name: v2
+    labels:
+      version: v2