Kubernetes: Service Mesh with Istio

Learn how to use Istio, a service mesh technology, in a Kubernetes environment to address some of the biggest issues with building microservice-based distributed software systems.

Introduction

• Automated service mesh with Istio
• What you should know
• Istio, Kubernetes, and microservices

1. Getting Meshed with Istio

• Installing Istio
• Injecting Istio into a microservice
• Verifying that Istio is meshing
• Converting to proxy auto-injection

2. Traffic Routing and Deployment

• Ingress gateways and virtual services
• Configuring rules to link specific labels
• Creating advanced route rules with Istio
• Adjusting Istio load-balancing ratios
• Modifying routes for Canary deployments
• Challenge: Testing a new release
• Solution: Testing a new release

3. Mutual TLS Endpoint Security

• Establishing MTLS credentials
• Connecting to non-MTLS services
• Getting into the MTLS mesh

4. Tracing Communications

• Connecting Istio to OpenTracing
• Following a multi-service path
• Understanding request latencies

5. Improving Microservice Robustness

• Injecting faults into service response
• Force aborts in specific applications
• Mirroring connections
• Circuit breaker tests via timeouts
• Challenge: Add a random failure
• Solution: Review response injection

Conclusion

• Next steps