Tencent Cloud

2 minute read

Prerequisites

Follow these instructions to prepare a Tencent Kubernetes Engine or Elastic Kubernetes Service cluster for Istio.

You can deploy a Kubernetes cluster to Tencent Cloud via Tencent Kubernetes Engine or Elastic Kubernetes Service which fully supports Istio.

Procedure

After creating a Tencent Kubernetes Engine or Elastic Kubernetes Service cluster, you can quickly start to deploy and use Istio by Tencent Cloud Mesh:

Log on to the Container Service console, and click Service Mesh in the left-side navigation pane to enter the Service Mesh page.
Click the Create button in the upper-left corner.
Enter the mesh name.
The mesh name can be 1–60 characters long and it can contain numbers, Chinese characters, English letters, and hyphens (-).
Select the Region and Zone in which the cluster resides.
Choose the Istio version.
Choose the service mesh mode: Managed Mesh or Stand-Alone Mesh.
Tencent Cloud Mesh supports Stand-Alone Mesh (Istiod is running in the user cluster and managed by users) and Managed Mesh (Istiod is managed by Tencent Cloud Mesh Team).
Configure the Egress traffic policy: Register Only or Allow Any .
Choose the related Tencent Kubernetes Engine or Elastic Kubernetes Service cluster.
Choose to open sidecar injection in the selected namespaces.
Configure external requests to bypass the IP address block directly accessed by the sidecar, and external request traffic will not be able to use Istio traffic management, observability and other features.
Choose to open SideCar Readiness Guarantee or not. If it is open, app containers will be created after sidecar is running.
Configure the Ingress Gateway and Egress Gateway.

Configure the Observability of Metrics, Tracing and Logging.
Besides the default Cloud Monitor services, You can choose to open the advanced external services like Managed Service for Prometheus and the Cloud Log Service.

After finishing these steps, you can confirm to create Istio and start to use Istio in Tencent Cloud Mesh.