Stack Overflow
Stack Overflow

Questions tagged [istio]

Istio is an open-source platform for managing and securing microservices

Istio is an open platform that provides a uniform way to connect, manage, and secure microservices. Istio supports managing traffic flows between microservices, enforcing access policies, and aggregating telemetry data, all without requiring changes to the microservice code. Istio gives you:

  • Automatic load balancing for HTTP, gRPC, and TCP traffic.
  • Fine-grained control of traffic behavior with rich routing rules, retries, failovers, and fault injection.
  • A pluggable policy layer and configuration API supporting access controls, rate limits and quotas.
  • Automatic metrics, logs, and traces for all traffic within a cluster, including cluster ingress and egress.
  • Secure service-to-service authentication with strong identity assertions between services in a cluster.

enter image description here

Getting Started

Books

2612 questions
37
votes
3 answers

What is the difference between Istio VirtualService and Kubernetes Service?

As I understand, Istio VirtualService is kind of abstract thing, which tries to add an interface to the actual implementation like the service in Kubernetes or something similar in Consul. When use Kubernetes as the underlying platform for Istio, is…
koly
  • 501
  • 1
  • 5
  • 12
35
votes
4 answers

Terminate istio sidecar istio-proxy for a kubernetes job / cronjob

We recently started using istio Istio to establish a service-mesh within out Kubernetes landscape. We now have the problem that jobs and cronjobs do not terminate and keep running forever if we inject the istio istio-proxy sidecar container into…
croeck
  • 696
  • 1
  • 11
  • 19
35
votes
2 answers

How does Istio compare to Traefik?

Traefik is a reverse HTTP proxy with several supported backends, Kubernetes included. How does Istio compare?
drewr
  • 1,778
  • 1
  • 16
  • 20
24
votes
5 answers

Istio Ingress resulting in "no healthy upstream"

I am using deploying an outward facing service, that is exposed behind a nodeport and then an istio ingress. The deployment is using manual sidecar injection. Once the deployment, nodeport and ingress are running, I can make a request to the istio…
Pegladon
  • 503
  • 1
  • 3
  • 12
22
votes
11 answers

Uninstall istio (all components) completely from kubernetes cluster

I installed istio using these commands: VERSION = 1.0.5 GCP = gcloud K8S = kubectl @$(K8S) apply -f istio-$(VERSION)/install/kubernetes/helm/istio/templates/crds.yaml @$(K8S) apply -f istio-$(VERSION)/install/kubernetes/istio-demo-auth.yaml @$(K8S)…
user674669
  • 10,681
  • 15
  • 72
  • 105
21
votes
2 answers

Is it possible to use Istio without kubernetes or docker?

I have 4 microservices running on my laptop listening at various ports. Can I use Istio to create a service mesh on my laptop so the services can communicate with each other through Istio? All the links on google about Istio include kubernetes but I…
user674669
  • 10,681
  • 15
  • 72
  • 105
21
votes
2 answers

What is a sidecar in the context of microservices?

I'm currently looking through an Istio and Kubernetes talk and mention the management of services along with the use of sidecars. I'm not sure what that is.
richard_d_sim
  • 793
  • 2
  • 10
  • 23
18
votes
2 answers

upstream connect error or disconnect/reset before headers. reset reason: connection failure. Spring Boot and java 11

I'm having a problem migrating my pure Kubernetes app to an Istio managed. I'm using Google Cloud Platform (GCP), Istio 1.4, Google Kubernetes Engine (GKE), Spring Boot and JAVA 11. I had the containers running in a pure GKE environment without a…
Victor
  • 181
  • 1
  • 1
  • 4
17
votes
1 answer

What is the difference between Mixer and Pilot in Istio?

I have read the docs, but seem not able to understand differences between Mixer and Pilot. Is there any overlap? I mean I would like to draw a definite boundary between them to understand their responsibilities and with respect to their…
soupybionics
  • 4,200
  • 6
  • 31
  • 43
14
votes
2 answers

Disable Istio sidecar injection to the job pod

How to disable Istio sidecar injection for the Kubernetes Job? apiVersion: batch/v1beta1 kind: CronJob metadata: name: pod-restart spec: concurrencyPolicy: Forbid schedule: '0 8 * * *' jobTemplate: metadata: annotations: …
Jonas
  • 4,683
  • 4
  • 45
  • 81
14
votes
1 answer

Istio(0.7.1) : Circuit Breaker Doesn't work for httpConsecutiveErrors

Circuit breaker doesn't trip on httpConsecutiveErrors: 1 (for 500 response). All requests pass through and give a 500 instead . Circuit breaker should trip and should return 503(Service Unavailable) instead . Follow the steps Circuit breaker…
Jeson Dias
  • 883
  • 2
  • 11
  • 26
13
votes
1 answer

kubernetes: Failed to update endpoints warning

Here is something I noticed in my kubectl get events output Warning FailedToUpdateEndpoint Endpoints Failed to update endpoint mynamespace/myservice: Operation cannot be fulfilled on endpoints "myservice": the object has been…
pkaramol
  • 16,451
  • 43
  • 149
  • 324
12
votes
3 answers

Necessity for separate VirtualService and DestinationRule configs in Istio

In Istio, I was wondering why VirtualService and DestinationRule are separated into two separate config files? AFAICT, the DestinationRule defines the subset and the VirtualService routes to the subset. Obviously, they both do more than just that,…
Uba
  • 619
  • 3
  • 8
  • 20
11
votes
1 answer

Istio - URI Rewrite with URI Regex Match

So relatively new to Istio and have a question regarding Istio. Say that I want to rewrite a URI based on a path, but use part of that original uri in the rewrite, is that something I could do with Regex? I'm imagining something like this http: -…
DominicEU
  • 3,585
  • 2
  • 21
  • 32
11
votes
2 answers

How to choose an API gateway in Kubernetes?

We've used Zuul as API gateway for a while in Microservices scene, recently we decided to move to Kubernetes and choose a more cloud native way. After some investigation and going through the Istio docs, we have some questions about API gateway…
xring
  • 727
  • 2
  • 8
  • 29
1
2 3
…
99 100