Istio¶
Istio is an open source platform used to connect, secure, control, and observe services^[istio.md]. It acts as a Service Mesh, managing traffic and service-to-service communication within a Kubernetes cluster^[400-devops-07-monitoring-and-observability-k8s-istio-samples-bookinfo-platform-kube-readme.md].
Overview¶
Istio's functionality allows for the management of microservices by providing a uniform way to secure, connect, and monitor these services^[istio.md]. It is commonly deployed to handle complex traffic management and enforce security policies across a distributed system^[istio.md].
Automatic sidecar injection¶
To manage network traffic, Istio utilizes a "sidecar" proxy architecture. This is typically implemented by labeling the target Kubernetes Namespace to enable automatic injection of the Istio proxy into pods^[istio.md].
[kubectl](<./kubectl.md>) label namespace default istio-injection=enabled --overwrite
Examples and Documentation¶
The official Istio documentation provides guides for deploying sample applications. For instance, the "Bookinfo" application is frequently used as a demo to showcase Istio's capabilities for routing and telemetry^[400-devops-07-monitoring-and-observability-k8s-istio-samples-bookinfo-platform-kube-readme.md]. Configuration examples for Service mesh deployments can be found in community repositories, such as the manifests provided by the Google Cloud Platform^[istio.md].
Installation¶
Istio can be installed and managed using the istioctl command-line tool^[istio.md].
Sources¶
400-devops-07-monitoring-and-observability-k8s-istio-samples-bookinfo-platform-kube-readme.mdistio.md