This workshop will introduce you to Istio and Envoy, service mesh tools that have changed the landscape of cloud-native applications. You will learn how and why to use these tools to solve the challenges of observability, security, networking, and multi-cloud deployments.

Throughout this workshop, we will be deploying onto, and interacting with Kubernetes. In this lab, we’ll provide the configuration inline to help you understand what’s happening, but the config is also provided in YAML files that you can apply directly.

A basic understanding of Kubernetes is a prerequisite to these labs. For background on Kubernetes or additional sources on service mesh, we recommend labs like Kubernetes 101 and Kubernetes Code Lab by Ray Tsang, the Kubernetes website for background, and environments like the Play with Kubernetes Classroom to play with a live system. We also recommend and gratefully acknowledge Ryan Knight's Istio Workshop, as well as Ray Tsang's.

We'll go over the content in the following order:

1. Installation, where we'll:
   1. Setup your cluster
   2. Deploy Istio
   3. Deploy our demo App
2. Look at Istio's observability features
3. Learn about Istio's traffic management capabilities
   1. Setting up ingress with Gateways
   2. See fine-grained traffic splitting by canarying a release
   3. Explore resiliency features
4. Use Istio's security features to:
   1. Terminate TLS at ingress
   2. Establish mTLS throughout the mesh
   3. Use Istio RBAC