Istio代理（Envoy）proxy-wasm扩展(oci)

场景描述

部署在istio的http服务需要拦截请求做处理，使用proxy-wasm作为envoy的扩展，harbor2作为仓库

安装WebAssembly Hub CLI

安装cli

curl -sL https://run.solo.io/wasme/install | sh
export PATH=$HOME/.wasme/bin:$PATH
1
2

验证cli

wasme --version

wasme version 0.0.32
1
2
3

初始化filter项目

可以修改assemblyscript的代码实现需要的功能

wasme init ./testfilter
Use the arrow keys to navigate: ↓ ↑ → ← 
? What language do you wish to use for the filter: 
    cpp
    rust
  ▸ assemblyscript
    tinygo

✔ assemblyscript
Use the arrow keys to navigate: ↓ ↑ → ← 
? With which platforms do you wish to use the filter?: 
  ▸ istio:1.5.x, istio:1.6.x, istio:1.7.x, gloo:1.6.x, istio:1.8.x
1
2
3
4
5
6
7
8
9
10
11
12

build项目推送wasm oci到harbor

wasme build assemblyscript -t 192.168.16.90/wasm/testfilter:v0.1 .
wasme push 192.168.16.90/wasm/testfilter:v0.1 --insecure --username=admin --password=Harbor12345
1
2

查看harbor仓库wasm项目下hello库

部署Wasme CRDs

# step1 deploy crds
kubectl apply -f https://github.com/solo-io/wasme/releases/latest/download/wasme.io_v1_crds.yaml
# step2 deploy Operator components
kubectl apply -f https://github.com/solo-io/wasme/releases/latest/download/wasme-default.yaml
1
2
3
4

部署proxy-wasm扩展

# vim wasm.yaml
apiVersion: wasme.io/v1
kind: FilterDeployment
metadata:
  labels:
    app: wasme-test-app
    app.kubernetes.io/name: wasme-test-app
  name: myfilter
  namespace: go-admin
spec:
  deployment:
    istio:
      kind: Deployment
  filter:
    config:
      '@type': type.googleapis.com/google.protobuf.StringValue
      value: world
    image: 192.168.16.90/wasm/testfilter:v0.1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

验证