Beyond the Basics: Istio and IBM Cloud Kubernetes Service¶
Istio is an open platform to connect, secure, control and observe microservices, also known as a service mesh, on cloud platforms such as Kubernetes in IBM Cloud Kubernetes Service and VMs. With Istio, You can manage network traffic, load balance across microservices, enforce access policies, verify service identity, secure service communication and observe what exactly is going on with your services.
YouTube: Istio Service Mesh Explained:
In this course, you can see how to install Istio alongside microservices for a simple mock app called Guestbook. When you deploy Guestbook's microservices into an IBM Cloud Kubernetes Service cluster where Istio is installed, you can choose to inject the Istio Envoy sidecar proxies in the pods of certain microservices.
Estimated completion time: 2 hours
Objectives¶
After you complete this course, you'll be able to:
- Download and install Istio in your cluster
- Deploy the Guestbook sample app
- Use metrics, logging and tracing to observe services
- Set up the Istio Ingress Gateway
- Perform simple traffic management, such as A/B tests and canary deployments
- Secure your service mesh
- Enforce policies for your microservices
Prerequisites¶
You must you must have a Pay-As-You-Go, or Subscription IBM Cloud account to complete all the modules in this course.
You must have already created a Standard 1.16+ cluster in IBM Cloud Kubernetes Service. FREE Cluster is not supported for this lab
You should have a basic understanding of containers, IBM Cloud Kubernetes Service, and Istio. If you have no experience with those, take the following courses:
- Get started with Kubernetes and IBM Cloud Kubernetes Service
- Get started with Istio and IBM Cloud Kubernetes Service
Workshop setup¶
- Exercise 1 - Accessing a Kubernetes cluster with IBM Cloud Kubernetes Service
- Exercise 2 - Installing Istio
- Exercise 3 - Deploying Guestbook sample application
Creating a service mesh with Istio¶
- Exercise 4 - Observe service telemetry: metrics and tracing
- Exercise 5 - Expose the service mesh with the Istio Ingress Gateway
- Exercise 6 - Perform traffic management
- Exercise 7 - Secure your service mesh
Cleaning up the Workshop¶
Script to uninstall ibmcloud
CLI: clean_your_local_machine.sh and unset KUBECONFIG
.
Script to delete Istio and Guestbook: clean_your_k8s_cluster.sh.