When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
Istio with EKS (Elastic Kubernetes Service)
This Elastic Kubernetes Service (EKS) training introduces Istio, a service mesh solution. Learners learn how to deploy and manage Istio on EKS and master traffic management, security, observability,...
Read MoreThis Elastic Kubernetes Service (EKS) training introduces Istio, a service mesh solution. Learners learn how to deploy and manage Istio on EKS and master traffic management, security, observability, and service-to-service communication in a microservices architecture.
Skills Gained
- Understand the fundamentals of service mesh and Istio
- Deploy Istio on EKS and configure its components
- Manage traffic routing and observe advanced networking in Istio
- Implement Istio security features like mutual TLS and authorization policies
- Gain insights into microservices performance using Istio observability tools
Prerequisites
All participants must have taken Introduction to Docker and Kubernetes or have equivalent experience.
Course Details
Training Materials
All Istio with EKS training attendees receive comprehensive courseware.
Software Requirements
Attendees will not need to install any software on their computers for this class. The class will be conducted in a remote environment that Accelebrate will provide; students will only need a local computer with a web browser and a stable Internet connection. Any recent version of Microsoft Edge, Mozilla Firefox, or Google Chrome will work well.
Outline
<ul><li>introduction</li><li>What is a Service Mesh? <ul><li>Challenges in microservices networking</li><li>Service mesh solutions and benefits</li></ul></li><li>Istio Overview <ul><li>Key features: traffic management, security, and observability</li><li>Istio architecture: Envoy proxy, control plane components</li><li>Sidecar vs. Ambient mode</li></ul></li><li>Elastic Kubernetes Service (EKS) Overview <ul><li>Benefits of using EKS for container orchestration</li><li>Prerequisites for Istio deployment on EKS</li></ul></li><li>Installing Istio on EKS <ul><li>Configuring EKS clusters</li><li>Installing Istio using Helm or Istioctl</li><li>Verifying the installation</li></ul></li><li>Core Traffic Features <ul><li>Traffic splitting, retries, and timeouts</li><li>Implementing canary deployments and blue-green deployments</li></ul></li><li>Istio Gateway and VirtualService Resources <ul><li>Configuring ingress and egress traffic</li><li>Path-based and header-based routing</li></ul></li><li>Monitoring and Telemetry <ul><li>Istio metrics and logs using Prometheus and Grafana</li><li>Distributed tracing with Jaeger</li><li>Service graph visualization using Kiali</li></ul></li><li>Securing Service-to-Service Communication <ul><li>Mutual TLS (mTLS) setup</li><li>Istio authentication policies</li></ul></li><li>Authorization Policies <ul><li>Configuring role-based access control (RBAC)</li><li>Enforcing security policies</li></ul></li><li>Optimizing Istio for Performance <ul><li>Fine-tuning Envoy proxies</li><li>Resource management for Istio components</li></ul></li><li>Scaling and Upgrading Istio <ul><li>Rolling updates for Istio control plane</li><li>Strategies for multi-cluster service mesh</li></ul></li><li>Troubleshooting Common Issues</li><li>Conclusion</li></ul>