liveBook · Manning

Istio

As explained in Kubernetes in Action, Second Edition

Istio is an open-source service mesh platform that provides traffic management, security, and observability for services.

Istio is a service-mesh platform and a Gateway API provider for Kubernetes. As a service mesh, it supports observability, traffic management, and security between services without code changes. As a Gateway API provider, it turns Gateway API resources into working traffic gateways. section 13.1.2

Istio’s role in Gateway API deployment is straightforward:

  • Gateway API resources provide configuration, but resources alone do nothing. section 13.1.3
  • Istio supplies the controllers that bring those resources to life. section 13.1.3
  • You can use Istio for Gateway API support without adopting its service-mesh functionality. section 13.1.2
  • Google Kubernetes Engine can provide its own Gateway API implementation, so installing Istio is not required there. section 13.1.2 section 13.1.3

Install Istio as a Gateway API provider

Install the istioctl command-line tool, run istioctl install -y --set profile=minimal, and verify that an istiod pod is running in the istio-system namespace. The ready istiod container hosts the controllers needed to manage Gateway API resources. section 13.1.3

$ curl -sL https://istio.io/downloadIstioctl | sh -

Use the installation command as the first step in deploying Istio with istioctl. section 13.1.3

$ istioctl install -y --set profile=minimal

Install Istio with the minimal profile after downloading istioctl. section 13.1.3

$ kubectl get pods -n istio-system
NAME                      READY   STATUS    RESTARTS   AGE
istiod-7448594799-fwd44   1/1     Running   0          54s      #1

Confirm deployment by checking for a ready istiod pod in istio-system. section 13.1.3

How Kubernetes in Action, Second Edition covers it

How deep it goes
Defines the two roles, installation workflow, controller relationship, namespace, and verification step without detailing service-mesh internals.
Examples
Uses istioctl installation, istiod pod verification, Gateway API CRDs, and GKE Gateway API enablement commands.
What it assumes
Assumes access to a Kubernetes cluster and familiarity with Kubernetes resources, namespaces, CRDs, and kubectl commands.
What you can do after
Operate/configure Istio as a Gateway API provider and verify its controller is ready to manage gateway resources.
How it connects
Connects Istio with Gateway API, Kubernetes controllers, service mesh, Kustomize, and Google Kubernetes Engine.

Also explained in

Compare how 3 books explain Istio →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Kubernetes in Action, Second Edition. The section links point to the parts of the book it draws on.