Preparations

Creating a VPC

A VPC is an isolated virtual network environment on Huawei Cloud. You can create security groups and subnets, configure IP address ranges, specify bandwidth sizes, and assign Elastic IP addresses (EIPs) in a VPC.

1. Log in to the VPC console.
2. Click Create VPC in the upper right corner.
3. Retain default settings for parameters unless otherwise specified. Then, click Create Now.

   For details, see Creating a VPC.

Creating a Key Pair

Create a key pair for identity authentication upon remote node login.

1. Log in to the Elastic Cloud Server (ECS) console.
2. In the navigation pane, choose Key Pair. On the Key Pair page, click Create Key Pair in the upper right corner.
3. Enter a key pair name and click OK.
4. Manually or automatically download the private key file. The file name is the specified key pair name with a suffix of .pem. Securely store the private key file. In the dialog box displayed, click OK.
   

   For security purposes, a key pair can be downloaded only once. Keep it secure to ensure successful login.

Creating a Load Balancer

A load balancer will be used as the external access entry of a service mesh. Traffic managed by a service mesh will be distributed by this load balancer to backend services.

1. Log in to the Elastic Load Balance (ELB) console.
2. Click Buy Elastic Load Balancer in the upper right corner.
3. Purchase a shared load balancer by referring to Creating a Shared Load Balancer.
   • Network Type: Select Public network.
   • VPC and Subnet: Select the VPC and subnet created in Creating a VPC respectively.
   Figure 1 Buying an elastic load balancer
   

Creating a Cluster

1. Log in to the Cloud Container Engine (CCE) console.
2. In the navigation pane, choose Resource Management > Clusters. On the displayed page, click Buy next to CCE Cluster.

   For details about how to create a cluster, see Buying a CCE Cluster.

3. On the Configure page, configure the following parameters and retain the default values for other parameters:
   • Cluster Name: Enter a cluster name, for example, cluster-test.
   • VPC and Subnet: Select the VPC and subnet created in Creating a VPC.

4. Click Next: Create Node and set the parameters as prompted. Set Specifications and Login Mode as follows, and retain the default settings for the other parameters.
   • Specifications: 4 vCPUs and 8 GB memory.
   • Login Mode: Select the key pair created in Creating a Key Pair for identity authentication upon remote node login.

5. Click Next: Install Add-on, and select the add-ons to be installed in the Install Add-on step.

   System resource add-on must be installed. Advanced functional add-on is optional.

6. Click Next: Confirm. Read the product constraints and select I am aware of the above limitations. Review the configured parameters and specifications.
7. Submit the order.

   If the cluster will be billed on a yearly/monthly basis, click Pay Now and follow on-screen prompts to pay the order.

   It takes about 6 to 10 minutes to create a cluster. You can click Back to Cluster List to perform other operations on the cluster or click Go to Cluster Events to view the cluster details.

(Optional) Creating a Namespace

1. Log in to the Cloud Container Engine (CCE) console.
2. In the navigation pane, choose Resource Management > Namespaces. Then, click Create Namespace in the upper right corner.
3. Enter the namespace name and select the created cluster.
4. Click OK.

Creating a Workload and a Service

1. Log in to the Cloud Container Engine (CCE) console.
2. In the navigation pane, choose Workloads > Deployments. On the page displayed, click Create Deployment.
3. Create a workload and a Service by referring to Creating a Deployment.

Buying a Mesh

1. Log in to the ASM console and click Buy Mesh.
2. Set Mesh Name to asmtest, select the cluster named cluster-test created in Creating a Cluster, and select a node on which the Istio control plane is installed. Select two or more nodes in different AZs.
3. Click Show Advanced Settings. In the Sidecar Configuration area, select the namespace named default and enable Restart Existing Services.
4. Set Observability Configuration to Connect with APM.

5. Review the mesh configuration in the Configuration List on the right of the page and click Pay Now.

   It takes about 1 to 3 minutes to create a mesh. If the mesh status changes from Installing to Running, the mesh is successfully created.

Diagnosing Configurations

ASM diagnoses all services in a managed cluster. Grayscale release can be performed only for services that are diagnosed as normal.

1. Log in to the ASM console, click the mesh named asmtest to view its details.
2. In the navigation pane on the left, choose Service Management, select Namespace: default from the drop-down list box, and view the Configuration Diagnosis Result of servicetest.
3. If the Configuration Diagnosis Result is Abnormal, click Fix to fix the issues.