This document helps you get started to develop code for Istio. If you're following this guide and find some problem, please submit an issue. so we can improve the doc.
This document is intended to be relative to the branch in which it is found. It is guaranteed that requirements will change over time for the development branch, but release branches should not change.
Istio components only have few external dependencies you need to setup before being able to build and run the code.
Many Istio components are written in the Go programming language. To build, you'll need a Go development environment. If you haven't set up a Go development environment, please follow these instructions to install the Go tools.
Istio currently builds with Go 1.9
Istio components are built using the Bazel build system. See here for the installation procedures. In addition to Bazel itself, you should install the Bazel buildifier tool from here.
Istio currently builds with Bazel 0.7.0
To run some of Istio's examples and tests, you need to set up Docker server. Please follow these instructions for how to do this for your platform.
Ensure your UID is in the docker group to access the docker daemon as a non-root user:
sudo adduser $USER docker
where: username is your login name
Set up your GOPATH, add a path entry for Go binaries to your PATH, set the ISTIO path, and set your GITHUB_USER used later in this document. These exports are typically added to your ~/.profile:
export GOPATH=~/go
export PATH=$PATH:$GOPATH/bin
export ISTIO=$GOPATH/src/istio.io # eg. ~/go/src/istio.io
# Please change HUB to the desired HUB for custom docker container
# builds.
export HUB="docker.io/$USER"
# The Istio Docker build system will build images with a tag composed of
# $USER and timestamp. The codebase doesn't consistently use the same timestamp
# tag. To simplify development the development process when later using
# updateVersion.sh you may find it helpful to set TAG to something consistent
# such as $USER.
export TAG=$USER
# If your github username is not the same as your local user name (saved in the
# shell variable $USER), then replace "$USER" below with your github username
export GITHUB_USER=$USER
Execute a one time operation to contain the Istio source trees.
mkdir -p $ISTIO
This is only necessary for core contributors in order to push changes to the main repos. You can make pull requests without two-factor authentication but the additional security is recommended for everyone.
To be part of the Istio organization, we require two-factor authentication, and you must setup a personal access token to enable push via HTTPS. Please follow these instructions for how to create a token. Alternatively you can add your SSH keys.
Follow the Google Container Registry Quickstart.
Below, we outline one of the more common Git workflows that core developers use. Other Git workflows are also valid.
- Go to https://github.com/istio/istio
- Click the "Fork" button (at the top right)
The commands below require that you have $GOPATH set ($GOPATH
docs). We highly recommend you put
Istio's code into your GOPATH. Note: the commands below will not work if
there is more than one directory in your $GOPATH
.
cd $ISTIO
git clone https://github.com/$GITHUB_USER/istio.git
cd istio
git remote add upstream 'https://github.com/istio/istio.git'
git config --global --add http.followRedirects 1
NOTE: The precommit hook is not functional as of 11/08/2017 following the repo reorganization. It should come back alive shortly.
Istio uses a local pre-commit hook to ensure that the code passes local tests before being committed.
Run
user@host:~/GOHOME/src/istio.io/istio$ ./bin/pre-commit
Installing pre-commit hook
This hook is invoked every time you commit changes locally. The commit is allowed to proceed only if the hook succeeds.
git checkout -b my-feature
# Make your code changes
git fetch upstream
git rebase upstream/master
Note: If you have write access to the main repositories (e.g. github.com/istio/istio), you should modify your Git configuration so that you can't accidentally push to upstream:
git remote set-url --push upstream no_push
When you're happy with some changes, you can commit them to your repo:
git add .
git commit
Then push the change to the fork. When prompted for authentication, use your GitHub username as usual but the personal access token as your password if you have not setup ssh keys. Please follow these instructions if you want to cache the token.
git push origin my-feature
- Visit https://github.com/$GITHUB_USER/istio
- Click the "Compare & pull request" button next to your "my-feature" branch.
Once your pull request has been opened it will be assigned to one or more reviewers. Those reviewers will do a thorough code review, looking for correctness, bugs, opportunities for improvement, documentation and comments, and style.
Very small PRs are easy to review. Very large PRs are very difficult to review. GitHub has a built-in code review tool, which is what most people use.
Upon merge, all Git commits should represent meaningful milestones or units of work. Use commits to add clarity to the development and review process.
Before merging a PR, squash any "fix review feedback", "typo", and "rebased" sorts of commits. It is not imperative that every commit in a PR compile and pass tests independently, but it is worth striving for. For mass automated fixups (e.g. automated doc formatting), use one or more commits for the changes to tooling and a final commit to apply the fixup en masse. This makes reviews much easier.
Please do not use force push after submitting a PR to resolve review feedback. Doing so results in an inability to see what has changed between revisions of the PR. Instead submit additional commits until the PR is suitable for merging. Once the PR is suitable for merging, the commits will be squashed to simplify the commit.
To build the core repo:
cd $ISTIO/istio
make build
This build command figures out what it needs to do and does not need any input from you.
Symlinks bazel artifacts into the standard go structure so standard go tooling functions correctly
./bin/bazel_to_go.py
(You can safely ignore some errors like
com_github_opencontainers_go_digest Does not exist
)
Build the containers in your local docker cache:
make docker
Push the containers to your registry:
make push
Use updateVersion.sh to generate new manifests with mixer, pilot, and ca_cert custom built containers:
cd $ISTIO/istio
install/updateVersion.sh -a${HUB},${TAG}
You can delete any build artifacts with:
make clean
You can run all the available tests with:
make test
You can get the current unit test coverage numbers on your local repo by going to the top of the repo and entering:
make coverage
You can automatically format the source code and BUILD files to follow our conventions by going to the top of the repo and entering:
make fmt
You can run all the linters we require on your local repo by going to the top of the repo and entering:
make lint
# To run only on your local changes
bin/linters.sh -s HEAD^
You can keep track of dependencies between sources using:
make gazelle
You can run the test suite using the Go race detection tools using:
make racetest
It will occasionally be necessary to add a new external dependency to the system Dependencies are maintained in the WORKSPACE file. To add a new dependency, please append to the bottom on the file. A dependency can be added manually, or via wtool.
All dependencies:
- MUST be specified in terms of commit SHA (vs release tag).
- MUST be annotated with the commit date and an explanation for the choice of
commit. Annotations MUST follow the
commit
param as a comment field. - SHOULD be targeted at a commit that corresponds to a stable release of the library. If the library does not provide regular releases, etc., pulling from a known good recent commit is acceptable.
Examples:
new_go_repository(
name = "org_golang_google_grpc",
commit = "708a7f9f3283aa2d4f6132d287d78683babe55c8", # Dec 5, 2016 (v1.0.5)
importpath = "google.golang.org/grpc",
)
git_repository(
name = "org_pubref_rules_protobuf",
commit = "b0acb9ecaba79716a36fdadc0bcc47dedf6b711a", # Nov 28 2016 (importmap support for gogo_proto_library)
remote = "https://github.com/pubref/rules_protobuf",
)
Before sending pull requests you should at least make sure your changes have passed both unit and integration tests. We only merge pull requests when all tests are passing.
- Unit tests should be fully hermetic
- Only access resources in the test binary.
- All packages and any significant files require unit tests.
- The preferred method of testing multiple scenarios or input is table driven testing
- Concurrent unit test runs must pass.
For local development (building from source and running the major components of the data path) on Ubuntu/raw VM:
Assuming you did (once):
- Install bazel, note that as of this writing Bazel needs the
openjdk-8-jdk
VM (you might need to uninstall or get out of the way theibm-java80-jdk
that comes by default with GCE for instance) - Install required packages:
sudo apt-get install make openjdk-8-jdk libtool m4 autoconf uuid-dev cmake golang-go
- Get the source trees
mkdir github cd github/ git clone https://github.com/istio/istio.git git clone https://github.com/istio/proxy.git
- You can then use (in the tools/ directory)
- tools/update_all : script to build from source
- tools/setup_run : run locally
- fortio (φορτίο) : load testing and minimal echo http and grpc server
- And an unrelated tool to aggregate GitHub Contributions statistics.
- And run things like
Note that this is done for you by setup_run but to use the correct go environment:
# Test the echo server: curl -v http://localhost:8080/ # Test through the proxy: curl -v http://localhost:9090/echo # Add a rule locally (simply drop the file or exercise the API:) curl -v http://localhost:9094/api/v1/scopes/global/subjects/foo.svc.cluster.local/rules --data-binary @quota.yaml -X PUT -H "Content-Type: application/yaml" # Test under some load: fortio load -qps 2000 http://localhost:9090/echo
cd istio/ source bin/use_bazel_go.sh