Istio Section Edition

Get started with an exciting Kubernetes "Service Mesh"

Fully revised and updated for Istio 1.8 onwards (2021)
This course aims to make Istio understandable, and will demonstrate the massive benefits a service mesh can bring to a live Kubernetes cluster.
Run Istio locally and try out its features using Minikube. Traffic Management, Telemetry, Distributed Tracing, Security and Fault Tolerance are all explained in detail.
Learn how to upgrade a live Istio cluster

Pre-requisites

Prior experience with Kubernetes is assumed. The course uses Minikube, but you will need sufficient RAM to be able to allocate 4Gb (eg 8Gb Host RAM should be sufficient).

Contents - The course is around 12 hours, with lots of hands on demos.

Having problems? check the errata for this course.

Course Introduction
Introduction 3m 39s
Getting Started
What is Istio 20m 1s
Hands on Demo
Getting Istio Running 18m 12s
Enabling Sidecar Injection 5m 13s
Visualizing the System with Kiali 15m 55s
Finding Performance Problems 14m 15s
Introducing Envoy
Introducing Envoy 12m 1s
Going Deeper into Envoy 23m 3s
Telemetry
Starting the Demo System 14m 1s
Kiali Deeper Dive 21m 59s
Kiali Dynamic Traffic Routing 12m 31s
Distributed Tracing Overview 13m 55s
Using JaegerUI 17m 24s
Why you need to Propagate Headers 20m 31s
What happens if you don't propagate headers 7m 35s
Metrics with Grafana 14m 56s
Traffic Management
Introducing Canaries 9m 40s
Canaries with Replicas 10m 15s
Version Grouping 7m 24s
Elegant Canaries and Staged Releases 11m 6s
What is an Istio VirtualService 19m 9s
VirtualService Configuration in yaml 12m 23s
What is an Istio DestinationRule 15m 52s
Load Balancing
Session Affinity - Stickiness 17m 0s
Consistent Hashing 21m 41s
Gateways
Why use an Ingress Gateway 21m 25s
Edge Proxies and Gateways 25m 22s
Prefix based routing 14m 40s
Subdomain Routing 11m 42s
Dark Releases
Header Based Routing 10m 44s
Dark Releases for all Microservices 27m 17s
Fault Injection
Fault Injection 19m 29s
Circuit Breaking
Cascading Failures 24m 37s
Configuring Outlier Detection 23m 9s
Testing Circuit Breakers 11m 45s
Mutual TLS
Why encryption is desirable inside a cluster 18m 7s
How Istio can upgrade traffic to TLS 7m 33s
Enabling mTLS Policies 3m 28s
STRICT vs PERMISSIVE 19m 40s
STRICT mTLS Works in Both Directions 1m 23s
Customising Istio
Introducing istioctl 11m 19s
Istio Profiles 9m 32s
Installing addons 5m 44s
Tuning Profiles 16m 59s
Enabling Third Party Tokens on Kops 7m 10s
Default vs Demo Profiles - CPU and Memory 16m 0s
Generating YAML Manifests 9m 2s
Upgrading Istio
In-place Upgrades 28m 5s
Canary Upgrades 24m 19s
Live Cluster Switchover Upgrades 9m 24s
Goodbye
Goodbye 3m 41s

Improve your coding skills from beginner to expert with the largest online Java e-learning platform

Istio Section Edition

Pre-requisites

Contents - The course is around 12 hours, with lots of hands on demos.

Course Introduction

Introduction

Getting Started

What is Istio

Hands on Demo

Getting Istio Running

Enabling Sidecar Injection

Visualizing the System with Kiali

Finding Performance Problems

Introducing Envoy

Introducing Envoy

Going Deeper into Envoy

Telemetry

Starting the Demo System

Kiali Deeper Dive

Kiali Dynamic Traffic Routing

Distributed Tracing Overview

Using JaegerUI

Why you need to Propagate Headers

What happens if you don't propagate headers

Metrics with Grafana

Traffic Management

Introducing Canaries

Canaries with Replicas

Version Grouping

Elegant Canaries and Staged Releases

What is an Istio VirtualService

VirtualService Configuration in yaml

What is an Istio DestinationRule

Load Balancing

Session Affinity - Stickiness

Consistent Hashing

Gateways

Why use an Ingress Gateway

Edge Proxies and Gateways

Prefix based routing

Subdomain Routing

Dark Releases

Header Based Routing

Dark Releases for all Microservices

Fault Injection

Fault Injection

Circuit Breaking

Cascading Failures

Configuring Outlier Detection

Testing Circuit Breakers

Mutual TLS

Why encryption is desirable inside a cluster

How Istio can upgrade traffic to TLS

Enabling mTLS Policies

STRICT vs PERMISSIVE

STRICT mTLS Works in Both Directions

Customising Istio

Introducing istioctl

Istio Profiles

Installing addons

Tuning Profiles

Enabling Third Party Tokens on Kops

Default vs Demo Profiles - CPU and Memory

Generating YAML Manifests

Upgrading Istio

In-place Upgrades

Canary Upgrades

Live Cluster Switchover Upgrades

Goodbye

Goodbye

Let the Course Come to You