## Taming Istio Configuration with Helm Ryan Michela / @ryanmichela / Salesforce IstioCon ## I n this talk This is a talk about using Helm with Istio Look at helm from a new perspective • Helm helps helps automate Istio day-2 tasks • Helm gitops ## HELM ## HELM The package manager for Kubernetes It's not just for installation anymore! ## HELM ## What is Helm? • Installer for Charts • Define need most of Helm to get the most from Helm! ## Managing Istio with Helm ## How does Helm relate to Istio? - Istio install built on Helm • Istio runs on YAML - Our services are installed with YAML

[Image](/uploads/documents/2/6/e/7/26e7ae12695c0e2584eb7f2157dc20c3/p2_7.jpg) Arriès de bus à Bruxelles et Lille Istio-redirector 301-redirection from /bus/routes/bruxelles/lille to /bus/routes/bruxelles-1/lille-3 ## How do we use Istio? Our infrastructure is deployed on GKE, with GCLB and Istio IngressGateway User | Google Cloud Load Balancer | Gateways | Web App --- | --- | --- | --- Istio VirtualService | [ [...] | | spec: | gateways: | - istio-system/istio-ingressgateway | hosts: | hosts: | - www.blablacar.fr | http: | http: | - match: | - uri: | exact: /co2 | redirect: | redirect: | uri: /blablalife/lp/zeroemptyseats

## Experiences from running Istio in a k8s production environment Line Moseng @linemoseng Johnny Horvi ## /nciv// 5,2 million ## 2023 年10月15日   ## app ## ↓ Istio RBAC Kubernetes Network Policy ## naiscar ## Lessons learned ## What's next? ## @nais_io @linemoseng

Service Mesh Meetup #4 上海站 2018.11.25 Observability And Istio Telemetry 吴晟 Apache SkyWalking Creator Apache ShardingSphere Co-founder Microsoft MVP Tetrate founding Engineer Bitmain tech expert tensions/v1beta1/namespace/istio-system/deployments/istio-policy| |source.workload.uid|string|Unique identifier of the source workload.|istio://istio-system/workloads/istio-policy| |source.workload.name|string|Source name|string|Source workload name.|istio-policy| https://istio.io/docs/reference/config/policy-and-telemetry/attribute-vocabulary/ # Metric settings in Istio bypass adaptor # instance for template metric

[Image](/uploads/documents/a/5/9/c/a59c70e237af7d1abccba9edbfb1edb2/p10_3.jpg) WEB AssemblyHub ## Simplified Istio Multicluster Model API server Istiod API server Istiod Service A ◇ Ingress Service B Mirror bug-report #IstioCon ## You Are Innovating Too Fast! #IstioCon ## I stio Feature Process Tracked at the Istio enhancements repository Checklist and approval required for feature promotions: Experimental-&g [Image](/uploads/documents/a/5/9/c/a59c70e237af7d1abccba9edbfb1edb2/p18_19.jpg) ## 2020 : Year of Istio Innovation Simplified installation Simplified control plane New extension Model Unified multicluster

Google enlisted NCC Group to perform an assessment on the open-source version of Istio and all of its components. Istio is a modern service mesh technology stack often used within Kubernetes clusters to facilitated by its control plane. The goal of the assessment was to identify security issues related to the Istio code base, highlight high risk configurations commonly used by administrators, and provide perspective partnership with Google's Istio subject matter experts. ## Scope NCC Group's evaluation of Istio included: - Istio Architecture: The overall design and architecture of Istio as it is deployed within