Istio Training 7 🔬 Controlling Configuration Scope
Paid
Members
Public
Controlling Configuration Scope By default Istio networking resources and services are visible to all services running in all namespaces that are part of the Istio service mesh. As you add more services to the mesh, the amount of sidecar proxy's configuration increases dramatically which will grow your sidecar proxy's memory
Istio Training 8 🔬 Debugging Istio Config
Paid
Members
Public
Debugging Istio Config The service mesh contains proxies that are on the request path between services. When anomalies are detected, it's typically because of a misconfiguration. In this lab, we explore tools to troubleshoot misconfiguration and get a better understanding of how to debug Istio. istioctl analyze The istioctl CLI
Istio Training 9 🔬Zero downtime upgrades
Paid
Members
Public
Zero downtime upgrades In this challenge, we will learn the proper method of upgrading Istio without your applications experiencing any downtime. This involves deploying a canary instance of the new Istio version, testing with a small workload first, and then gradually moving over all workloads while monitoring. This approach is
Istio Training 10 🔬Automating Config with ArgoCD and Argo Rollouts
Paid
Members
Public
Install and configure Argo Rollouts with IstioExit [https://play.instruqt.com/study-room/invites/ghe2rwkadr5z/soloio/tracks/operationalizing-istio] Start Automating Config with ArgoCD and Argo Rollouts ArgoCD ArgoCD is a collection of tools for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration
Istio Training 11 🔬 Multi-tenancy
Paid
Members
Public
we will dive into namespace tenancy where 3 teams each have their own hostname, deployed workloads, and Istio configuration while sharing the same cluster. Multi-tenancy In Istio, a tenant is a group of users that share common access and priviledges for a set of deployed workloads. Tenants are like teams,
Istio Training 12 🔬 Certificate Rotation
Paid
Members
Public
Istio uses x509 certificates and SPIFFE to implement identity and uses this mechanism to accomplish two important security practices: implement authentication and encrypt the transport (TLS/mTLS). Certificate Rotation One important capability that Istio provides is workload identity. With workload identity, we can encode an identity into a verifiable document
Istio Training 13 🔬 Multi-cluster Istio
Paid
Members
Public
Install an Istio mesh across multiple Kubernetes clusters. Multi-cluster IstioIn this lab, we explore some of Istio's multi-cluster capabilities. Istio actually has a few different approaches to multi-cluster as you can see in the documentation but we recommend you chose an approach that favors running multiple control planes (starting with
Istio Ambient Mesh
Paid
Members
Public
Istio Ambient Mesh implements a “sidecarless” architecture which is transparent to the workloads in the mesh. This approach provides a number of benefits including incremental adoption, improved operations and more. This hands-on course will help you better understand how Istio Ambient Mesh works, how to install it, and how to
