Complete Istio Service Mesh (1.8) Masterclass + AWS EKS

Learn Istio Service Mesh using Handson (Gateway, Canary Traffic Shifting, Fault Injection, Circuit Breaker, JWT, Egress)

Created by: CSCareerKaizen.com | CKA & CKS & AWS DevOps Pro (元Microsoft現シリバレエンジニア)
元Microsoft→現Silicon Valley DevOps、AWS DevOps Pro, CKA&CKS

What Will I Learn?

• how to control ingress traffic using Gateway, VirtualService, DestinationRules
• how to configure SSL Termination at AWS ELB created by Istio ingress gateway using k8s service YAML
• how to configure canary rollouts/weight-based routing/traffic splitting using Virtual Service and Destination Rule
• how to configure identity/header based routing
• how to configure and test failure recovery features (injecting delay and abort, setting retries and timeout)
• how to configure and test mirroring live traffic to different versions of app workloads
• how to configure and test rate limiting and circuit breaker
• how to verify default "permissive mode" of mutual TLS in service mesh, and how to enable STRICT mode of mutual TLS
• how to set up end user authentication and authorization with JWT using Request Authentication and Authorization Policy
• how to control egress traffic using Service Entry and Virtual Service
• how to enable TLS Origination for egress traffic using Destination Rule
• how to use Kiali dashboard to visualize mesh topology, logs, metrics, and YAML validation

Requirements

• you have learned Kubernetes fundamentals (pod, service, deployment, ingress, configmap, role, etc)
• you have development experience in Kubernetes YAML resources
• you have experience using Minikube or AWS EKS or GKE
• Mac or Linux highly recommended

Target audience

• You want to learn how to secure K8s in-cluster network with Istio Service Mesh
• You feel overwhelmed and don't know where to start with Istio Service Mesh in Kubernetes
• You used Nginx Ingress Controller but want to use production-ready Ingress Controller
• You used AWS ALB Ingress Controller but its limitation with ingress YAML pushed you away from using it
• You want to learn service mesh so that you can control in-cluster traffic to microservice applications
• You want to authenticate and authorize end users using JWT using Istio
• You want to be able to configure SSL for AWS ELB using Istio Ingress Gateway Service YAML
• You want to learn how to monitor microservice app's distributed request tracing using Kiali and Jaeger dashboards