Istio, le meilleur ami de votre cluster K8S
summary
Istio inserts Envoy sidecars as a data plane plus a control plane to add observability (Jaeger, Kiali, Grafana), traffic steering (virtual services, destination rules, gateways), and runtime policies like mirroring, canary deployments and percentage traffic-splitting for zero-downtime rollouts. It offloads retries, rate limiting and pool-ejection, issues and rotates mTLS certs via Citadel, supports Lua or WebAssembly plugins, and expands to VMs/databases. Installation is istioctl or an operator; production overhead exists but can be tuned (proxy CPU/memory cut by ~10x with rules).
AI-written summary · about
chapters (14)
- 0:00Introduction to Istio
- 1:25Speaker introduction and context
- 3:10History and evolution of Istio
- 5:56Istio architecture and service mesh
- 10:12Observability with Istio
- 14:08Connecting applications with Istio
- 16:36Controlling traffic and deployments
- 25:23Zero-downtime deployments
- 26:06Resilience and error handling
- 32:24Security with mutual TLS and JWT
- 36:18Extending Istio with Lua and WebAssembly
- 38:07Mesh expansion and multi-cluster
- 39:53Getting started with Istio
- 43:33Q&A: Istio vs Linkerd and resource overhead
