Life Outside the Cluster: Adding Virtual Machines to an Envoy Service Mesh
Talkat KubeCon + CloudNativeCon North America 2019 · on Thursday, 2019-11-21· at 10:55· Room 15AB - San Diego Convention Center, Mezzanine Level·
summary
Shows a working setup that adds GCE VMs to an Istio/Envoy mesh running on GKE: a VM runs Envoy and a node agent, a Kubernetes Service plus an Istio service entry points that DNS name at the VM IP, and the control plane is reached via an ingress gateway. Demos use Prometheus/Kiali for metrics, enforce mutual TLS across pods and VMs, and perform a rolling traffic split (90/10) between VM and new GKE pod. Everything is live and observable; the integration and policies work as demonstrated.
AI-written summary · about
chapters (4)
related talks
50mMulti-Cluster Kubernetes and Service Mesh Patterns
15mKeynote: Deploying an Envoy-Based Service Mesh in Minutes Across Kubernetes and VMs
58mService Mesh and Sidecars with Istio and Envoy
32mKubeVirt + Istio: Virtual Machines on Kubernetes
37mStretching the Mesh
58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...
19mService Mesh and Your Legacy Apps: Connecting to Kubernetes with Consul
53mDo you need a Service Mesh?