Tasks
Tasks show you how to do a single specific targeted activity with the Istio system.
-
Traffic Management
- Configuring Request Routing. This task shows you how to configure dynamic request routing based on weights and HTTP headers.
- Fault Injection. This task shows how to inject delays and test the resiliency of your application.
- Traffic Shifting. Shows you how to migrate traffic from an old to new version of a service.
- Setting Request Timeouts. This task shows you how to setup request timeouts in Envoy using Istio.
- Control Ingress Traffic. Describes how to configure Istio to expose a service outside of the service mesh.
- Securing Gateways with HTTPS. Describes how to configure Istio to expose a service outside of the service mesh, over TLS or Mutual TLS.
- Control Egress Traffic. Describes how to configure Istio to route traffic from services in the mesh to external services.
- TLS Origination for Egress Traffic. Describes how to configure Istio to perform TLS origination for traffic to external services
- Configure an Egress Gateway. Describes how to configure Istio to direct traffic to external services through a dedicated gateway service
- Circuit Breaking. This task demonstrates the circuit-breaking capability for resilient applications
- Mirroring. This task demonstrates the traffic shadowing/mirroring capabilities of Istio
-
Security
- Basic Authentication Policy. Shows you how to use Istio authentication policy to setup mutual TLS and basic end-user authentication.
- Testing Mutual TLS. Shows you how to verify and test Istio's automatic mutual TLS authentication.
- Basic Access Control. Shows how to control access to a service using the Kubernetes labels.
- Secure Access Control. Shows how to securely control access to a service using service accounts.
- Role-Based Access Control. Shows how to set up role-based access control for services in Istio mesh.
- Plugging in external CA key and certificate. Shows how operators can configure Citadel with existing root certificate, signing certificate and key.
- Citadel health checking. Shows how to enable Citadel health checking with Kubernetes.
- Mutual TLS over HTTPS. Shows how to enable mutual TLS on HTTPS services.
-
Policies
- Enabling Rate Limits. This task shows you how to use Istio to dynamically limit the traffic to a service.
-
Telemetry
- Distributed Tracing. How to configure the proxies to send tracing requests to Zipkin or Jaeger
- Collecting Metrics and Logs. This task shows you how to configure Istio to collect metrics and logs.
- Collecting Metrics for TCP services. This task shows you how to configure Istio to collect metrics for TCP services.
- Querying Metrics from Prometheus. This task shows you how to query for Istio Metrics using Prometheus.
- Visualizing Metrics with Grafana. This task shows you how to setup and use the Istio Dashboard to monitor mesh traffic.
- Generating a Service Graph. This task shows you how to generate a graph of services within an Istio mesh.
- Logging with Fluentd. This task shows you how to configure Istio to log to a Fluentd daemon