Get Started With Istio Service Mesh Workshop - Lin Sun, Solo.io (Part 2)
summary
Hands-on steps show how Istio injects an init container sets iptables and runs an Envoy sidecar that receives keys via SDS so the proxy can enforce Envoy sidecar gets certs via SDS and 24h rotation. Observability is wired to Kiali, Jaeger and Grafana; mutual TLS can be flipped from permissive to strict mTLS blocks non-mesh clients and rejects external clients. Demo covers canary routing (20% → 50% → 100%), destination rules, ServiceEntry for external APIs, proxy‑ready annotation, and built‑in two retries (three attempts total).
AI-written summary · about
chapters (18)
- 0:00Start
- 3:36Istio Proxy Container
- 6:55Kayali Graph
- 7:39Distributed Tracing
- 9:53Grid Founder Dashboard
- 14:14Demo
- 14:36What Are the Peer Authentication Policy in My Kubernetes Cluster
- 16:20Mutual Tls
- 19:52Istio Proxy Configman
- 21:46Validate the Identity of the Client
- 23:22How Does the Web Api Service Obtain the Necessary Key and Certificates
- 27:46Best Practice To Deploy Istio in Production
- 29:00Control Traffic Lab
- 31:09Lab 5
- 31:34Purchase History Version 2
- 32:21Destination Rule
- 37:31Header Based Routing
- 40:30Control Outbound Traffic
related talks
01h 33mTutorial: Istio Service Mesh Get Started Workshop
28mService Mesh: Demystifying Istio
52mEmpower Your Microservices with Istio Service Mesh
50mService Mesh and Sidecars with Istio and Envoy
42mSecuring Kubernetes Workloads with Istio Service Mesh
34mService Mess to Service Mesh
52mMaking microservices micro with Istio Service Mesh & Kubernetes
43mService Mesh for developers