Exposing Service Mesh Applications With Consul Ingress Gateways

Ingress Gateways are a new feature of Consul in version 1.8 and allow you to expose services running in Consul Service Mesh to non service mesh users or applications. In this demo we see how to configure host header redirect from a public TLS endpoint to two upstream applications.

Running the demo (Mac and Linux): curl https://shipyard.run/blueprint | bash -s github.com/shipyard-run/blueprints//consul-ingress

Source Code: https://github.com/shipyard-run/bluep...

Ingress Gateways: https://www.consul.io/docs/connect/in...

Shipyard Install: https://shipyard.run/docs/install

Consul Service Mesh Deep Dive: https://youtu.be/Aq1uTozNajI

Chapters:

0:00 Intro

1:37 Running the demo

3:24 Consul configuration

5:37 Ingress Gateway setup

7:25 Configuring Ingress Gateway to expose services

12:48 Examining Envoy configuration generated by Consul

14:55 Fetching the root CA for the public TLS endpoint

15:40 Testing the setup