Tasks
Tasks show you how to do a single specific targeted activity with the Istio system.
- Traffic Management
- Configuring Request Routing. This task shows you how to configure dynamic request routing based on weights and HTTP headers.
- Fault Injection. This task shows how to inject delays and test the resiliency of your application.
- Traffic Shifting. This task shows you how to migrate traffic from an old to new version of a service.
- Setting Request Timeouts. This task shows you how to setup request timeouts in Envoy using Istio.
- Istio Ingress. Describes how to configure Istio Ingress on Kubernetes.
- Control Egress Traffic. Describes how to configure Istio to route traffic from services in the mesh to external services.
- Control Egress TCP Traffic. Describes how to configure Istio to route TCP traffic from services in the mesh to external services.
- Circuit Breaking. This task demonstrates the circuit-breaking capability for resilient applications
- Mirroring. Demonstrates Istio's traffic shadowing/mirroring capabilities
- Traffic Management (v1alpha3)
- Configuring Request Routing. This task shows you how to configure dynamic request routing based on weights and HTTP headers.
- Fault Injection. This task shows how to inject delays and test the resiliency of your application.
- Traffic Shifting. This task shows you how to migrate traffic from an old to new version of a service.
- Setting Request Timeouts. This task shows you how to setup request timeouts in Envoy using Istio.
- Control Ingress Traffic. Describes how to configure Istio to expose a service outside of the service mesh.
- Control Egress Traffic. Describes how to configure Istio to route traffic from services in the mesh to external services.
- Control Egress TCP Traffic. Describes how to configure Istio to route TCP traffic from services in the mesh to external services.
- Circuit Breaking. This task demonstrates the circuit-breaking capability for resilient applications
- Mirroring. This task demonstrates the traffic shadowing/mirroring capabilities of Istio
- Policy Enforcement
- Enabling Rate Limits. This task shows you how to use Istio to dynamically limit the traffic to a service.
- Metrics, Logs, and Traces
- Distributed Tracing. How to configure the proxies to send tracing requests to Zipkin or Jaeger
- Collecting Metrics and Logs. This task shows you how to configure Istio to collect metrics and logs.
- Collecting Metrics for TCP services. This task shows you how to configure Istio to collect metrics for TCP services.
- Querying Metrics from Prometheus. This task shows you how to query for Istio Metrics using Prometheus.
- Visualizing Metrics with Grafana. This task shows you how to setup and use the Istio Dashboard to monitor mesh traffic.
- Generating a Service Graph. This task shows you how to generate a graph of services within an Istio mesh.
- Logging with Fluentd. This task shows you how to configure Istio to log to a Fluentd daemon
- Security
- Testing Istio mutual TLS authentication. This task shows you how to verify and test Istio's automatic mutual TLS authentication.
- Setting up Basic Access Control. This task shows how to control access to a service using the Kubernetes labels.
- Setting up Secure Access Control. This task shows how to securely control access to a service using service accounts.
- Setting up Istio Role-Based Access Control. This task shows how to set up role-based access control for services in Istio mesh.
- Per-service mutual TLS authentication enablement. This task shows how to change mutual TLS authentication for a single service.
- Plugging in CA certificate and key. This task shows how operators can plug existing certificate and key into Istio CA.
- Enabling Istio CA health check. This task shows how to enable Istio CA health check.