istio setup and added links to docs

README.md

@@ -4,36 +4,46 @@
 
 In my case there is a VPN connection to the `192.168.96.0/22` network.
 
-1. Terraform
+1. Terraform (in local)
 
 Setup env variables (`PM_USER`, `PM_PASS`)
-```
+```sh
 cd terraform
 terraform init
 terraform apply
 ```
 
-2. Ansible
+2. Ansible (in local)
 
-```
+```sh
 cd ansible
 ./bootstrap.sh
 ansible-playbook install.yml
 ```
 
-3. KubeSpray
+3. KubeSpray (on mgmt)
 
-ssh into the mgmt vm
-```
+```sh
 cd /root/kubespray
 ansible-playbook -i inventory/prod/inventory.ini cluster.yml -e download_run_once=True -e download_localhost=True --become
 ```
 
 (prod `inventory` is copied from `ansible/files/...`)
 
-4. Setup NFS Storageclass
+4. Copy .kube config with ansible (in local)
 
+```sh
+cd ansible
+ansible-playbook cp-kube-config.yml
 ```
+
+5. Setup NFS Storageclass (on mgmt)
+
+https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner
+
+On mgmt
+
+```sh
 helm repo add nfs-subdir-external-provisioner https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
 
 helm install nfs-subdir-external-provisioner \
@@ -43,3 +53,25 @@ helm install nfs-subdir-external-provisioner \
 ```
 
 default storageclass name: `nfs-client`
+
+6. Install istio (on mgmt)
+
+https://istio.io/latest/docs/setup/install/operator/
+
+```sh
+istioctl operator init # Setup the operator
+
+kubectl apply -f - <<EOF
+apiVersion: install.istio.io/v1alpha1
+kind: IstioOperator
+metadata:
+  namespace: istio-system
+  name: istio-control-plane
+spec:
+  profile: default
+EOF # Default setup for istio
+
+# Validate that it is installed
+kubectl get svc -n istio-system
+kubectl get pods -n istio-system
+```