IoK: Istio-on-Kubernetes Deep Dive [I]

on YouTube ↗35m

" summary

Deploys Istio on Kubernetes with the Bookinfo app so every pod gains an Envoy sidecar plus an init container iptables step that redirects traffic; the init container terminates, the proxy stays. Control plane runs pilot pushes config and mixer as policy/telemetry backends; pilot does service discovery, Envoy hot-restarts and routes on port 9080 to clusters with endpoints like .71 .72 .73. CA issues certificates for mutual TLS. Ingress uses an Envoy ingress controller; egress is blocked by default unless allowed.

AI-written summary · about

" chapters (15)

1. 0:00Start
2. 1:24Istio Architecture
3. 1:54Sidecar Proxy Injection
4. 3:39Initializer Pod & Config
5. 10:50Initializer Logs: BookInfo Svcs
6. 11:01Pod Details for Envoy Sidecar
7. 12:03Envoy Sidecar Runtime Config
8. 17:45Envoy Runtime Config Details
9. 19:11Discovery & Load Balancing
10. 20:16Pilot Configuration
11. 22:54Control Plane: Mixer
12. 24:19Mixer Config
13. 29:54Security
14. 31:41Ingress
15. 32:12Egress

" related talks

• 01h 01mMeshing Around with IstioJonathan Johnson · Developer Summit 2020
• 01h 06mIstio on Kubernetes: Smart Canaries, Dark Launches and ChaosBurr Sutter · Silicon Valley Code Camp 2018
• 40mIstio, your K8S cluster best friendKevin Davin · Voxxed Days Bucharest 2022
• 48mSecuring Kubernetes with IstioErlend Oftedal · NDC Security Oslo 2019
• 07mISTIO with BookInfo ApplicationDhanush Gowda Vidyaranya · DevOps Enterprise Summit Virtual - Europe 2022
• 38mBuilding Hybrid Clouds with IstioAllan Naim, Rohit Agarwalla · KubeCon + CloudNativeCon Europe 2018
• 47mIstio, le meilleur ami de votre cluster K8SKevin Davin · Devoxx France 2021
• 43mService Mesh for developersAbdel Sghiouar · Voxxed Days Thessaloniki 2023