This hands-on course teaches learners to implement and manage Istio on Azure Kubernetes Service (AKS). Through practical exercises, learners gain proficiency in leveraging Istio for traffic control,...
Read MoreThis hands-on course teaches learners to implement and manage Istio on Azure Kubernetes Service (AKS). Through practical exercises, learners gain proficiency in leveraging Istio for traffic control, enhancing security, achieving comprehensive observability, and streamlining service-to-service communication within microservices deployments.
All participants must have taken Introduction to Docker and Kubernetes or have equivalent experience.
All Istio with AKS training attendees receive comprehensive courseware.
Attendees will not need to install any software on their computers for this class. The class will be conducted in a remote environment that Accelebrate will provide; students will only need a local computer with a web browser and a stable Internet connection. Any recent version of Microsoft Edge, Mozilla Firefox, or Google Chrome will work well.
<ul><li>Introduction</li><li>What is a Service Mesh? <ul><li>Challenges in microservices networking</li><li>Service mesh solutions and benefits</li></ul></li><li>Istio Overview <ul><li>Key features: traffic management, security, and observability</li><li>Istio architecture: Envoy proxy, control plane components</li><li>Sidecar vs. Ambient mode</li></ul></li><li>Azure Kubernetes Service (AKS) Overview <ul><li>Benefits of using AKS for container orchestration</li><li>Prerequisites for Istio deployment on AKS</li></ul></li><li>Installing Istio on AKS <ul><li>Configuring AKS clusters</li><li>Installing Istio using Helm or Istioctl</li><li>Verifying the installation</li></ul></li><li>Core Traffic Features <ul><li>Traffic splitting, retries, and timeouts</li><li>Implementing canary deployments and blue-green deployments</li></ul></li><li>Istio Gateway and VirtualService Resources <ul><li>Configuring ingress and egress traffic</li><li>Path-based and header-based routing</li></ul></li><li>Monitoring and Telemetry <ul><li>Istio metrics and logs using Prometheus and Grafana</li><li>Distributed tracing with Jaeger</li><li>Service graph visualization using Kiali</li></ul></li><li>Securing Service-to-Service Communication <ul><li>Mutual TLS (mTLS) setup</li><li>Istio authentication policies</li></ul></li><li>Authorization Policies <ul><li>Configuring role-based access control (RBAC)</li><li>Enforcing security policies</li></ul></li><li>Optimizing Istio for Performance <ul><li>Fine-tuning Envoy proxies</li><li>Resource management for Istio components</li></ul></li><li>Scaling and Upgrading Istio <ul><li>Rolling updates for Istio control plane</li><li>Strategies for multi-cluster service mesh</li></ul></li><li>Troubleshooting Common Issues</li><li>Conclusion</li></ul>