awesome-kubernetes/docs/istio.md

Istio - Service Mesh

• Docs
• API Access Control
• Maistra Istio
• Admiral
• Kiali project, observability for the Istio service mesh
• Jaeger tracing. Open source, end-to-end distributed tracing
• Envoy micro proxy
• Kibana
• AWS App Mesh
• Istio and AWS EKS
• Tweets

Docs

• Istio.io
• github.com: Istio
• blog.openshift.com: How to Explain Service Mesh in Plain English
• Red Hat Developer: Istio Service Mesh
• karlstoney.com: Istio 503's with UC's and TCP Fun Times
• medium.com/solo-io blog Connecting the world’s applications with APIs and Service Mesh
• medium.com/solo-io: Istio the Easy Way (Again!)
• blog.christianposta.com: Istio as an Example of When Not to Do Microservices
• istiobyexample.dev 🌟
  • istiobyexample.dev: Fault Injection
• medium.com: Getting started with Istio
• blog.openshift.com: Red Hat OpenShift Service Mesh is now available: What you should know 🌟
• magalix.com: Getting Started With Istio: Overview And Installation
• The Istio project just consolidated its control plane services: Pilot, Citadel, Galley, and the sidecar injector, into a single binary, Istiod
• magalix.com: Working with Istio: Track your services with Kiali
• banzaicloud.com: Istio telemetry V2 (Mixerless) deep dive
• medium.com: How to Manage Microservices on Kubernetes With Istio How to implement DevSecOps on microservices architecture with a service mesh
• github.com/askmeegs/learn-istio 🌟
• banzaicloud.com: What's new in Istio 1.6, a quick walkthrough
• Riding the Tiger: Lessons Learned Implementing Istio 🌟
• dev.to/aurelievache: Understanding Istio: part 1 – Istio Components
  • dev.to/aurelievache: Understanding Istio: part 9 – DestinationRule
  • dev.to/aurelievache: Understanding Istio: part 16 – Observability / Metrics
• banzaicloud.com: Controlling egress traffic with Istio
• banzaicloud.com: Istio ingress controller as an API gateway
• openshift.com: Monitoring Services like an SRE in OpenShift ServiceMesh Part 2: Collecting Standard Metrics 🌟
• istio.io: Learn Microservices using Kubernetes and Istio 🌟 step-by-step tutorial
• thenewstack.io - Service Mesh: The Gateway to Cloud Migration
• thenewstack.io: Kubernetes, Microservices, and Istio  — A Great Fit!
• medium: Observability With Istio, Kiali, and Grafana in Kubernetes and Spring Boot 🌟
• solo.io: Learn how to rate limit requests in Istio 🌟
• solo.io: Identity Federation for Multi-Cluster Kubernetes and Service Mesh
• sysdig.com: How to monitor Istio, the Kubernetes service mesh
• tetrate.io: VM to container communications 101 How can I use Istio Service Mesh to make VMs and containers talk to each other?
• redhat-scholars: istio-tutorial 🌟 Polyglot microservices (Java, Node, .NET) + Istio on Kubernetes/OpenShift
• medium: Introduction to Istio Traffic Management. Traffic Routing with Istio by Example 🌟
• loginradius.com: Istio Service Mesh: A Beginners Guide 🌟 This post will give a high-level introduction to Istio and its related concepts and terminologies.
• dzone: The Kubernetes Service Mesh: A Brief Introduction to Istio 🌟 In this blog we explore what the Istio service mesh is, its architecture, when and where to use it, plus some criticisms of the platform.
• blog.jetstack.io: Istio OIDC Authentication A service mesh is an architectural pattern that provides common network services as a feature of the infrastructure. This typically includes features such as service discovery and policy enforcement to control how services within the mesh can communicate with each other.
• medium.com: Increasing observability on Istio: The new Kiali health configuration
• dzone: Istio Service Mesh, the Step-by-Step Guide, Part 1: Theory 🌟 In Part 1, we go over the concepts behind Istio and Service Mesh, such as their architecture, how they function, and more.
  • dzone: Istio Service Mesh, the Step-by-Step Guide, Part 2: Tutorial 🌟
• solo.io: The evolution of VM support in Istio 1.8 (with video)
• jetstack.io: Securing Istio workloads with mTLS using cert-manager
• thenewstack.io: Why Do You Need Istio When You Already Have Kubernetes? 🌟
• medium: Managing Microservices With Istio Service Mesh in Kubernetes
• thenewstack.io: Solo.io: Istio Is Winning the Service Mesh War
• dzone: vice Meshes: Why Istio? An Introduction There are 3 leading contenders in the cluster ecosystem for service mesh, all open source. We compare and discuss why Istio is the best choice in most scenarios.
• tetrate.io: Why do you need Istio when you already have Kubernetes?
• learncloudnative.com: Attach multiple VirtualServices to Istio Gateway
• thenewstack.io: What Is Istio and Why Does Kubernetes Need it? 🌟
• youtube: Istio & Service Mesh - simply explained in 15 mins 🌟
• dev.to: A GitOps recipe for Progressive Delivery with Istio 🌟 GitOps and Progressive Delivery featuring IstioMesh, PrometheusIO, Flux v2 & Flagger.
• samos-it.com: Securing Redis with Istio TLS origination Istio is daunting and not all use cases are well documented. The public docs focus mostly on using the egress gateway for TLS orignation. The use case of using the sidecar for TLS origination with a database isn't documented well. This blog post hopes to solve that.
• solo.io: Istio multi-cluster on Red Hat OpenShift with Gloo Mesh
• giffgaff.io: Using Istio with Nginx ingress
• solo.io: Ode to Istio 🌟
• thenewstack.io: Istio 1.10 Improves Scalability and Revision Control
• istio.io: Configuring failover for external services Learn how to configure locality load balancing and failover for endpoints that are outside of your mesh.
• medium: Automated canary deployments with Flagger and Istio
• thenewstack.io: Multicluster Management with Kubernetes and Istio
• piotrminkowski.com: Multicluster Traffic Mirroring with Istio and Kind
• thenewstack.io: Securing Istio Workloads with Auth0
• tetrate.io: Multicluster Management with Kubernetes and Istio 🌟
• thenewstack.io: Why Do You Need Istio When You Already Have Kubernetes? 🌟
• solo.io: Upgrading Istio without Downtime
• tetrate.io: Using Istio Service Mesh as API Gateway 🌟
• mirantis.com: Your App Deserves More than Kubernetes Ingress: Kubernetes Ingress vs. Istio Gateway [webinar]
• solo.io: Configuration as Data, GitOps, and Controllers: it’s not simple for multi-cluster
• solo.io: Istio’s networking: An in-depth look at traffic and architecture 🌟 Istio’s networking in a demo environment
• solo.io: Navigating Istio Config: a look into Istio’s toolkit
• ==inder-devops.medium.com: On-premise to cloud migration mock drills using Istio== 🌟 Part 1 of a series of articles about cloud migration. Application workload migration from one kubernetes cluster to another using Istio. This article explains an approach that makes use of service mesh capability to migrate entire platform from onpremise to cloud or cluster to cluster migration.
• baeldung.com: Service Mesh Architecture with Istio
• chrishaessig.medium.com: Multi cluster setup with istio

API Access Control

• medium: API Access Control using Istio Ingress Gateway
• medium: API Authentication using Istio Ingress Gateway, OAuth2-Proxy and Keycloak

Maistra Istio

• Maistra.io
• github.com: Maistra Istio
• Installing on OKD/OCP

Admiral

• istio-ecosystem/admiral Admiral provides automatic configuration and service discovery for multicluster Istio service mesh. Istio has a very robust set of multi-cluster capabilities. Managing this configuration across multiple clusters at scale is challenging. Admiral takes an opinionated view on this configuration and provides automatic provisioning and syncing across clusters. This removes the complexity for developers and mesh operators.

Kiali project, observability for the Istio service mesh

• kiali.io
• github.com: kiali
• medium.com: kiali project
• itnext.io: Find issues in your Istio mesh with Kiali
• dzone: Deployment Monitoring Tools — Kiali A description of common issues with deployment monitoring, and a features list of Kiali and how to use it.

Jaeger tracing. Open source, end-to-end distributed tracing

• Monitor and troubleshoot transactions in complex distributed systems
• jaegertracing.io
• hackernoon.com: A Guide to Deploying Jaeger on Kubernetes in Production
• hackernoon.com: How To Use OpenTelemetry And Jaeger To Implement Distributed Tracing And APM

Envoy micro proxy

• envoyproxy.io
• getenvoy.io
• Controlling outbound traffic from Kubernetes
• medium: Troubleshooting Envoy with Kiali Inspect and debug your Envoy configuration

Kibana

• kibana
• The Best Tools for Exporting Elasticsearch Data from Kibana

AWS App Mesh

• aws.amazon.com/app-mesh
• allthingsdistributed.com: Redefining application communications with AWS App Mesh

Istio and AWS EKS

• itnext.io: Observing gRPC-based Microservices on Amazon EKS running Istio Observing a gRPC-based Kubernetes application using Jaeger, Zipkin, Prometheus, Grafana, and Kiali on Amazon EKS running Istio service mesh

Tweets

Click to expand!

💎 Hidden gem feature

Did you know that Kiali can automatically generate all the Authorization Policies of a namespace?

Via telemetry, Kiali can define one Authz Policy per each service in the mesh.@IstioMesh #servicemesh #authorization #security #k8s pic.twitter.com/YlEKRq6nq0

— Kiali (@KialiProject) May 16, 2021

<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>