This doc set is for users of the Gloo Mesh Gateway product to set up an Istio ingress gateway. For users of the Gloo Gateway product to set up an ingress gateway with the Kubernetes Gateway API instead, see the Gloo Gateway docs.
Collect compute instance metadata
Allow OTel collector agents to gather metadata about the compute instances that the workload cluster is deployed to.
Allow OTel collector agents to gather metadata about the compute instances that the workload cluster is deployed to, and add the metadata as labels on the metrics it scrapes. This compute instance metadata helps you better visualize your Gloo Mesh Gateway setup across your cloud provider infrastructure network. For example, if you deploy workload clusters across multiple cloud providers, you can more easily see how your Gloo resources are deployed across your compute instances in the Gloo UI.
Step 1: Enable infrastructure settings in your cloud provider link
Enable Workload Identity for the workload cluster. Workload Identity allows the Kubernetes service account for the OTel collector to act as a GCP IAM service account, which you assign the necessary permissions to.
Save your GCP project ID in an environment variable.
export PROJECT=<gcp_project_id>
Create an IAM service account in GCP for the OTel collector in the workload cluster, and grant IAM permissions so that the collector can access metadata about the compute instances that the workload cluster is deployed to.
Create an IAM service account in GCP named OTelCollector.
gcloud iam service-accounts create OTelCollector --project $PROJECT
Create an IAM role that gives the permission to describe the VM instances in your project.
Click the Graph tab to open the network visualization graph for your Gloo Mesh Gateway setup.
From the footer toolbar, click Layout Settings.
Toggle Group By to INFRA to review the clusters, virtual machines, and Kubernetes namespaces that your app nodes are organized in. This view also shows details for the cloud provider infrastructure, such as the VPCs and subnets that your resources are deployed to. You can see more compute network details by clicking on resource icons, which opens the resource’s details pane.