Stack Overflow
Stack Overflow

Questions tagged [istio]

Istio is an open-source platform for managing and securing microservices

Istio is an open platform that provides a uniform way to connect, manage, and secure microservices. Istio supports managing traffic flows between microservices, enforcing access policies, and aggregating telemetry data, all without requiring changes to the microservice code. Istio gives you:

  • Automatic load balancing for HTTP, gRPC, and TCP traffic.
  • Fine-grained control of traffic behavior with rich routing rules, retries, failovers, and fault injection.
  • A pluggable policy layer and configuration API supporting access controls, rate limits and quotas.
  • Automatic metrics, logs, and traces for all traffic within a cluster, including cluster ingress and egress.
  • Secure service-to-service authentication with strong identity assertions between services in a cluster.

enter image description here

Getting Started

Books

2612 questions
4
votes
3 answers

How is a service mesh different from a 2010 ESB solution like IBM IIB or Oracle ESB

Back in the days, I used to be a IBM Integration Bus (IIB) - then known as IBM WebSphere Message Broker - developer. I would develop message flows to connect various input, output and processing nodes. This development style, of course, extends to…
cogitoergosum
  • 2,309
  • 4
  • 38
  • 62
4
votes
1 answer

Istio circuit breaker not opening the circuit on consecutiveErrors when downstream service throws 5xx (500, 502, 503, 504) errors

I have a couple of microservices, customer-service and customer-rating-service. The first one invokes the latter. I have placed a circuit breaker on invocations to customer-rating-service, and forced this service to always throw a 5xx error to…
codependent
  • 23,193
  • 31
  • 166
  • 308
4
votes
1 answer

How to install certificate in Istio ingress gateway in GKE

Using GKE with integrated istio, is it possible to use a google managed certificate for the ingress gateway? When the cluster is created, the ingress is already present. I don't see how to inject other than by managing a secret and linking to the…
unludo
  • 4,912
  • 7
  • 47
  • 71
4
votes
4 answers

Should I use an API Gateway or Service Mesh?

Say you are using Microservices with Docker Containers and Kubernetes. If you use an API Gateway (e.g. Azure API Gateway) in front of your microservices to handle composite UI and authentication, do you still need a Service Mesh to handle Service…
user217648
  • 3,338
  • 9
  • 37
  • 61
4
votes
2 answers

Istio direct Pod to Pod communication

I have a problem with the communication to a Pod from a Pod deployed with Istio? I actually need it to make Hazelcast discovery working with Istio, but I'll try to generalize the issue here. Let's have a sample hello world service deployed on…
Rafał Leszko
  • 4,939
  • 10
  • 19
4
votes
1 answer

How to configure Istio's virtualservice for a service which exposes multiple ports?

I have a container which exposes multiple ports. So, the kubernetes service configured for the deployment looks like the following: kind: Service apiVersion: v1 metadata: name: myapp labels: app: myapp spec: selector: name: myapp …
enator
  • 2,431
  • 2
  • 28
  • 46
4
votes
1 answer

Istio blocking connection to MySQL

I would like to deploy the java petstore for kubernetes. In order to achieve this I have 2 simple deployments. The first one is the java web app and the second one is a MySQL database. When istio is disabled the connection between the app and the DB…
Doctor
  • 7,115
  • 4
  • 37
  • 55
4
votes
3 answers

Error install istio in GKE = the server could not find the requested resource (post `gatewaies.networking.istio.io`)

I have the following error when installing istio in GKE kubernetes ver = 1.11.2-gke.18 Istio ver = 1.0.4 Kubectl = latest from repo google Error from server (NotFound): error when creating "`install/kubernetes/istio-demo-auth.yaml`": the server…
Abdi Darmawan
  • 49
  • 1
  • 4
4
votes
1 answer

How to use Jaeger with Spring WebFlux?

We are trying to go reactive with Webflux. We are using Jaegar with Istio for instrumentation purposes. Jaegar understands Spring MVC endpoints well, but don't seem to work at all for WebFlux. I am looking for suggestions to make my webflux…
Anoop Hallimala
  • 625
  • 1
  • 11
  • 25
4
votes
1 answer

Istio DestinationRule gives upstream connect error or disconnect/reset before headers

I try to get some basic routing between 2 apps deployed on a Google Cloud Kubernetes cluster with an lb ratio and I have this config: apiVersion: v1 kind: Service metadata: name: kubeapp labels: app: kubeapp spec: ports: - port: 8080 …
Padi
  • 711
  • 9
  • 18
4
votes
2 answers

Istio JWT verification against JWKS with internally signed certificate

I'm attempting to configure Istio authentication policy to validate our JWT. I set the policy and can see it takes affect. However it won't allow anything to connect. When applying the policy if I inspect the istio-pilot logs I can see it failing to…
Sean
  • 41
  • 2
4
votes
0 answers

Not able to connect to HTTPS service using ISTIO Gateway and Virtual Service

As I am new to istio, along with all my team members, we would really appreciate if we can get some help here. Problem I have followed the below documentation to create certs and create secrets in k8s using the application cert and…
Yoda
  • 323
  • 6
  • 14
4
votes
1 answer

Istio End User Authentication with JWT on a GRPC service

I would like to set up an auth policy on a GRPC service through Istio. Currently, it's possible to add the policy on regular HTTP services, as you can use the Authorization header to pass the JWT token to the service. I'm a bit lost as it doesn't…
odino
  • 1,069
  • 11
  • 27
4
votes
1 answer

What is the minimum Google Kubernetes Engine cluster size / Configuration for Istio?

I tried to launch Istio on Google Kubernetes Engine using the Google Cloud Deployment Manager as described in the Istio Quick Start Guide. My goal is to have a cluster as small as possible for a few very lightweight microservices. Unfortunately,…
sceee
  • 1,681
  • 19
  • 34
4
votes
2 answers

Istio + Elasticsearch

I'm playing with Istio and Elasticsearch, I have virtual box machines on my laptop I Installed Elastic search from this link Kubernetes Elasticsearch Cluster I have a master es + data es, if I installed them without Istio, they run normally. If I…
Arkan
  • 579
  • 1
  • 6
  • 20
1 2 3
…
99 100