istio - 🧑‍💻 Funky Penguin

🧑‍💻 Funky Penguin

Sign in Subscribe

istio

A collection of 4 posts

Run Harbor v2 with Istio mTLS behind a VirtualService

Harbor is an open source registry which can store and manage access to your OCI (Docker) images, helm charts, and other OCI artifacts. Istio is a service mesh which ensures that traffic between participating pods is encrypted and authenticated with mutual TLS. Harbor maintains a helm chart, which either deploys

Customizing Istio's trace sampling rate per-pod

Customizing Istio's trace sampling rate per-pod

We're using Istio across an increasing range of services, and occasionally we need to "dial up" the default sampling rate from 1% to 100% for debug / analysis reasons (we send our traces to Jaeger). I wanted to know whether it's possible to change sampling

Applying PSPs to istio-cni-node pods

Applying PSPs to istio-cni-node pods

I work on Kubernetes cluster which are a whole lot more locked-down than typical installation instructions / application defaults would suggest. In one such cluster, we use PodSecurityPolicies to apply a minimal set of privileges to each pod, and make exceptions on a case-by-case basis. On the same cluster, we use

Istio Namespace Isolation

Istio Namespace Isolation

I’m working on a project which requires a CockroachDB instance in multiple namespaces (prod/uat/dev), in an Isio-enabled Kubernetes cluster. There are currently some pretty significant drawbacks to using Istio with “headless TCP” services, one of which being you can only have a single instance of a service