Istio 101
The Blitz version of the Istio 101 Workshop presented by IBM This will be a fast run through of some of the basic Istio features. If attendees come with a kubernetes cluster already configured, this can be done in 70 minutes.
Presenters:
- Spencer Krum, IBM
Assistants:
Beyond the Basics: Istio and IBM Cloud Kubernetes Service
Istio is an open platform to connect, secure, and manage a network of microservices, also known as a service mesh, on cloud platforms such as Kubernetes in IBM Cloud Kubernetes Service. With Istio, You can manage network traffic, load balance across microservices, enforce access policies, verify service identity on the service mesh, and more.
In this course, you can see how to install Istio alongside microservices for a simple mock app called Guestbook. When you deploy Guestbook's microservices into an IBM Cloud Kubernetes Service cluster where Istio is installed, you inject the Istio Envoy sidecar proxies in the pods of each microservice.
Note: Some configurations and features of the Istio platform are still under development and are subject to change based on user feedback. Allow a few months for stablilization before you use Istio in production.
Objectives
After you complete this course, you'll be able to:
- Download and install Istio in your cluster
- Deploy the Guestbook sample app
- Set up the Istio Ingress Gateway
- Perform simple traffic management, such as A/B tests and canary deployments
- Secure your service mesh
- Enforce policies for your microservices
- Use metrics, logging and tracing to observe services
Prerequisites
You will set up a free IBM Cloud account to complete all the modules in this course. A feature code will be provided to you to enable kubernetes clusters.
Use Kubernetes 1.9.x or newer because earlier versions may require changes in manifests. This is the default on IBM Kubernetes Service (IKS)
You will create a cluster in IKS.
If you are using a Trial IBM Cloud Account, be aware that you may encounter resource caps, especially if there are existing resources in your cluster. During the course, if any pods remain in Pending status, you may need to adjust the number of replicas in the various deployment yamls to a value of 1, delete the deployment, and attempt the steps again.
You should have a basic understanding of containers, IBM Cloud Kubernetes Service, and Istio. If you have no experience with those, take the following courses:
- Get started with Kubernetes and IBM Cloud Kubernetes Service
- Get started with Istio and IBM Cloud Kubernetes Service
Workshop setup
- Exercise 0 - Creating an IBM Cloud Account and creating a kubernetes cluster
- Exercise 1 - Accessing a Kubernetes cluster with IBM Cloud Kubernetes Service
- Exercise 2 - Installing Istio
- Exercise 3 - Deploying Guestbook with Istio Proxy
Creating a service mesh with Istio
- Exercise 4 - Expose the service mesh with the Istio Ingress Gateway
- Exercise 5 - Perform traffic management
- Exercise 6 - Observe service telemetry: metrics and tracing
- Exercise 7 - Secure your service mesh
- Exercise 8 - Enforce policies for microservices
Where to get more?
Twitter: @nibalizer, @sai_vennam
IBM Code: https://developer.ibm.com/code
Twitch: https://twitch.tv/ibmcode