lectures.alex.balgavy.eu

commit 505e978e83b5e86bf7ac00a602c1be85cf691f33
parent a9ea8d4edca71facab433b1dd50e66af231be24d
Author: Alex Balgavy <alex@balgavy.eu>
Date:   Tue,  1 Feb 2022 20:08:22 +0100

Update software containerization notes

Diffstat:
M
content/softcont-notes/_index.md
 | 
1
+
A
content/softcont-notes/istio/architecture.png
 | 
0

A
content/softcont-notes/istio/index.md
 | 
22
++++++++++++++++++++++

3 files changed, 23 insertions(+), 0 deletions(-)
diff --git a/content/softcont-notes/_index.md b/content/softcont-notes/_index.md
@@ -17,3 +17,4 @@ title = 'Software Containerisation'
 13. [Controlling access to Kubernetes API](controlling-access-to-kubernetes-api)
 14. [Affinity and anti-affinity](affinity-and-anti-affinity)
 15. [Pod disruption budget](pod-disruption-budget)
+16. [Istio](istio)
diff --git a/content/softcont-notes/istio/architecture.png b/content/softcont-notes/istio/architecture.png
Binary files differ.
diff --git a/content/softcont-notes/istio/index.md b/content/softcont-notes/istio/index.md
@@ -0,0 +1,22 @@
++++
+title = 'Istio'
++++
+
+# Istio
+Istio is a service mesh.
+Provides:
+- ingress gateway to config access to services of Cluster without configuring ROutes
+- virtual services to create routing rules, which you could use for e.g. configuring A/B testing
+- security: cert management, authentication policy, authorization policy
+- observability: metrics, distributed traces, access logs
+
+Istio architecture:
+
+![Istio architecture diagram](architecture.png)
+
+Can enable in microk8s with `microk8s enable istio`.
+Needs a LoadBalancer, so install metallb.
+
+Istio provides a CLI: `istioctl`.
+
+Prometheus is used to collect metrics.