Istio Hands-On For Kubernetes

Learn how the Istio service mesh can turbo charge your Kubernetes career - with hands on, real world practicals

What you'll learn
What are Service Meshes?
What is Istio?
How can I run Istio locally?
What are Envoy Proxies?
The Istio Control and Data Planes
Visualising a Cluster using Kiali
Distributed Tracing using Jaeger
Monitoring metrics using Grafana
What are Istio VirtualServices and DestinationRules?
How to deploy Canaries (and what they are!)
How to deploy "Dark Releases"
Istio Gateways
How to test the resilience of a system using Fault Injection
Requirements
Understand standard Kubernetes
Be familiar with pods, deployments and services from Kubernetes
Be able to run a Kubernetes environment such as Minikube
If using Minikube, 4gb is required and therefore an 8gb host machine (laptop/desktop) is required
Description
Istio is one of the most talked-about frameworks in recent years! If you've worked with Kubernetes before, then you'll want to learn Istio! With this hands-on, practical course, you'll be able to gain experience in running your own Istio Service Meshes. Warning - Istio currently (April 2022) doesn't support the new Mac M1 architecture. In particular, Ingress gateways don't currently work. It looks like Istio won't be adding support any time soon, sadly. In the meantime, you can still study most of the course but there may be occasional problems! You could also use something like an EC2 instance to run Istio.This course is designed to be clear and understandable - and fun! But we also go into detail - you'll be learning how to use Istio in real production scenarios - and you'll be looking at the inner workings of Istio.You can run this course on your own computer, using Minikube (8Gb of Host Ram required) - you don't need a cloud provider, although you can also run the course there - anywhere that you can run Kubernetes!After a brief talk about what Istio is, we go straight into a hands-on demo, where you'll experience how Istio can solve difficult problems on live projects.Then you'll find out the details of:Traffic ManagementTelemetryVisualisation (with Kiali)Distributed Tracing (with Jaeger)Using Grafana to monitor network trafficHow to deploy canary releasesHow to do "Dark Releases"Istio VirtualServices and DestinationRulesLoad Balancing and Session AffinityIstio GatewaysResilience testing with Fault InjectionCircuit Breaking/Outlier DetectionSecuring cluster traffic with Mutual TLS (mTLS)The "learning curve" for Istio is steep - which is why I've designed this course to be as clear and understandable as possible, and I hope with the hands-on demos, you'll also have fun along the way. But most of all, Istio is an extremely powerful tool, and it's a great addition to your CV!

Overview

Section 1: Introduction

Lecture 1 Introduction

Lecture 2 Course Downloads

Section 2: Getting Started

Lecture 3 What is Istio?

Section 3: Hands on Demo

Lecture 4 Installing Minikube

Lecture 5 Getting Istio Running

Lecture 6 Enabling Sidecar Injection

Lecture 7 Visualizing the System with Kiali

Lecture 8 Finding Performance Problems

Section 4: Introducing Envoy

Lecture 9 Introducing Envoy - The Data Plane

Lecture 10 The next lecture is optional!

Lecture 11 Going Deeper into Envoy (Optional Video)

Section 5: Telemetry

Lecture 12 Starting the Demo System

Lecture 13 Kiali Deeper Dive

Lecture 14 Kiali Dynamic Traffic Routing

Lecture 15 Distributed Tracing Overview

Lecture 16 Using Jaeger UI

Lecture 17 Why you need to "Propagate Headers"

Lecture 18 What happens if you don't propagate headers?

Lecture 19 Metrics with Grafana

Section 6: Traffic Management

Lecture 20 Introducing Canaries

Lecture 21 Canaries with Replicas

Lecture 22 Version Grouping

Lecture 23 Elegant Canaries and Staged Releases

Lecture 24 What is an Istio VirtualService?

Lecture 25 VirtualService Configuration in yaml

Lecture 26 What is an Istio DestinationRule?

Section 7: Load Balancing

Lecture 27 Session Affinity ("Stickiness")

Lecture 28 What is Consistent Hashing useful for?

Section 8: Gateways

Lecture 29 Why do I need an Ingress Gateway?

Lecture 30 Edge Proxies and Gateways

Lecture 31 Prefix based routing

Lecture 32 Subdomain Routing

Section 9: Dark Releases

Lecture 33 Using a browser extension to modify headers

Lecture 34 Header Based Routing

Lecture 35 Dark Releases for all Microservices

Section 10: Fault Injection

Lecture 36 Fault Injection

Section 11: Circuit Breaking

Lecture 37 Cascading Failures

Lecture 38 Configuring Outlier Detection

Lecture 39 Testing Circuit Breakers

Section 12: Mutual TLS

Lecture 40 Why is encryption needed inside a cluster?

Lecture 41 How Istio can upgrade traffic to TLS

Lecture 42 Enabling mTLS - it's Automatic

Lecture 43 STRICT vs PERMISSIVE mTLS

Lecture 44 STRICT mTLS Works in Both Directions

Section 13: Customizing and Installing Istio with Istioctl (updated for 2021, Istio 1.8+)

Lecture 45 Introducing istioctl

Lecture 46 Istio Profiles

Lecture 47 Installing addons

Lecture 48 Notes on the upcoming video

Lecture 49 Tuning Profiles

Lecture 50 Note on the upcoming video

Lecture 51 Default vs Demo Profiles - CPU and Memory

Lecture 52 Generating YAML Manifests

Section 14: Upgrading Istio

Lecture 53 In-Place Upgrades

Lecture 54 "Canary Upgrades" (Rolling Upgrades)

Lecture 55 Live Cluster Switchovers (Alternative to the official upgrade paths)

Section 15: Goodbye!

Lecture 56 Goodbye

Any Kubernetes developer who wants to learn what Istio can do for them,Anyone who has tried to understand Istio but finds the standard documentation too confusing