Running Istio in Production as a Small Team of Newbies
Talkat Istio Day Europe 2023 · on Tuesday, 2023-04-18· at 14:35· Hall 7, Room D | Ground Floor | Europe Complex·
summary
Small platform team (starts at three, runs at two) migrates a legacy Mesos/nginx+Lua traffic stack to Kubernetes using Istio + Envoy and an AWS ALB ingress, keeping three traffic flavors (consumer, third‑party, trusted) and avoiding rewrites of 300 microservices. Deploy pipeline uses Argo CD + Helm + Terraform. A custom Envoy filter handles broken tokens, Istio AuthorizationPolicy replaces 200+ lines of Lua to block unsafe methods, and the system runs in production with generated hostnames and visible traffic dashboards.
AI-written summary · about
chapters (4)
related talks
24mNavigating the Maze of Multi-Cluster Istio: Lessons Learned at Scale
43mProgressive Application Delivery: Istio Ambient Mesh and Argo Rollout in Action
28mChallenges and Best Practices While Upgrading Istio in a Production...
21mFrom Zero to Prod in 2 Months with a Team of One
43mUsing Kubernetes, Spinnaker and Istio to Manage a Multi-cloud Environment
27mIstio Ambient Mesh in Production: Our Journey from Sidecar to Sidecar-less
27mSecure Multicluster Istio Configuration Using GitOps...
19mPlanning the Zero-Downtime Lifecycle of Your Service Mesh