Istio is an open platform to connect, secure, control and observe microservices, also known as a service mesh, on cloud platforms such as Kubernetes in IBM Cloud Kubernetes Service and VMs. With Istio, You can manage network traffic, load balance across microservices, enforce access policies, verify service identity, secure service communication and observe what exactly is going on with your services.
In this course, you can see how to install Istio alongside microservices for a simple mock app called Guestbook. When you deploy Guestbook's microservices into an IBM Cloud Kubernetes Service cluster where Istio is installed, you can choose to inject the Istio Envoy sidecar proxies in the pods of certain microservices.
After you complete this course, you'll be able to:
- Download and install Istio in your cluster
- Deploy the Guestbook sample app
- Use metrics, logging and tracing to observe services
- Set up the Istio Ingress Gateway
- Perform simple traffic management, such as A/B tests and canary deployments
- Secure your service mesh
- Enforce policies for your microservices
You do not need to make your own Kubernetes cluster. We've pre-provisioned clusters on IBM Cloud. To get access to one of these clusters, follow these steps:
- Create an IBM Cloud account
- Log-in to IBM Cloud
- Use the Grant Cluster helper application to obtain a cluster.
- Lab key is
devopsdays - Enter the IBM ID you created in
Step 1 - Use the
Frankfurtregion - Hit `Submit`
- Lab key is
- IMPORTANT: Make a note of the confirmation page - screenshot or copy the cluster number. Note the cluster number:
mycluster###
You should also have a basic understanding of containers, Kubernetes, and Istio.
- Exercise 1 - Accessing a Kubernetes cluster with IBM Cloud Kubernetes Service
- Exercise 2 - Installing Istio
- Exercise 3 - Deploying Guestbook with Istio Proxy
- Exercise 4 - Observe service telemetry: metrics and tracing
- Exercise 5 - Expose the service mesh with the Istio Ingress Gateway
- Exercise 6 - Perform traffic management
- Exercise 7 - Secure your service mesh
- Exercise 8 - Enforce policies for microservices
We have a script that will remove ibmcloud at here and unset your KUBECONFIG for you.
We have given you a script as a convenient way to remove Istio and the guestbook application from your instance.
NOTE: This puts your kubernetes cluster in a empty state, so do not run this on anything other then a place you are willing to loose everything.