Test Chaos Mesh with Istio

[chaos-mesh]

Test Chaos Mesh with Istio

[siddontang]

https://istio.io/docs/tasks/traffic-management/fault-injection/

We can also try to integrate the fault injection if user uses Istio.

[zhouqiang-cl]

https://istio.io/docs/tasks/traffic-management/fault-injection/

We can also try to integrate the fault injection if user uses Istio.

Great idea

[Yisaer]

I think Chaos-Mesh could make Istio as an option component to extend the network chaos for HTTP protocol. The only problem is How compatible is with the existed network chaos and the Istio sidecar model.

[zhouqiang-cl]

I think Chaos-Mesh could make Istio as an option component to extend the network chaos for HTTP protocol. The only problem How compatible is with the existed network chaos and the Istio sidecar model.

can we add a mode in network chaos such as http

[linda01232003]

When I use NetworkChaos on my exist istio system, I find it didn't work.
I expect ping pod ip will delay, but it not delay。
After a while I found my controller inject istio sidecar，I guess it intercept the NetworkChaos Inject。
The chaos-daemon log shows that：

kubectl log  chaos-daemon-fzjjg -c  chaos-daemon -n chaos-testing
log is DEPRECATED and will be removed in a future version. Use logs instead.
Chaos-daemon Version: version.Info{GitVersion:"v0.0.0-master+$Format:%h$", GitCommit:"a5f2eaabc4c55d07c575577565f6570cd767e8b7", GitTreeState:"dirty", BuildDate:"2020-01-19T10:43:02Z", GoVersion:"go1.13", Compiler:"gc", Platform:"linux/amd64"}
2020-01-20T10:56:10.143Z        INFO    chaos-daemon    starting server
You have mail in /var/spool/mail/root
It can not receive any message。

After I remove the controller sidecar and NetworkChaos Inject can work。

[zhouqiang-cl]

@linda01232003 thank you for your information. @cwen0 @Yisaer We should also think how to run on istio

[Yisaer]

Hi @linda01232003,
AFAIK, there are 2 ways to help you to avoid Istio inject sidecar into Chaos-Mesh.
The first way is to remove the label of the namespace by:

kubectl label namespace chaos-testing istio-injection-

And the second way is to annotate the pod with sidecar.istio.io/inject: "false" which I had created issue to help this. #200

Here is document for istio inject detail.

[zhouqiang-cl]

It works. Tested by @YangKeao