Istio is an open-source service mesh that provides a uniform way to manage, connect, and secure microservices. It helps to manage traffic, enhance security capabilities, and provide telemetry data for understanding service behavior. See the open-source Istio documentation.
The Istio module installs and manages Istio in your Kyma cluster. The latest release includes the following versions of Istio and Envoy:
Istio version: 1.23.2
Envoy version: 1.31.2
Note
If you want to enable compatibility with the previous minor version of Istio, see Compatibility Mode.
- Access to a Kubernetes cluster (v1.24 or higher)
- kubectl
-
Create the
kyma-system
namespace and label it withistio-injection=enabled
:kubectl create namespace kyma-system kubectl label namespace kyma-system istio-injection=enabled --overwrite
-
Install the latest version of Istio Operator and Istio CustomResourceDefinition. You can install either the standard or experimental version.
-
To install the standard version, run:
kubectl apply -f https://github.com/kyma-project/istio/releases/latest/download/istio-manager.yaml
-
To install the experimental version, run:
kubectl apply -f https://github.com/kyma-project/istio/releases/latest/download/istio-manager-experimental.yaml
-
-
To install Istio, apply the default Istio custom resource (CR):
kubectl apply -f https://github.com/kyma-project/istio/releases/latest/download/istio-default-cr.yaml
-
To verify the Istio was installed successfully, check the state of the Istio CR.
kubectl get -n kyma-system istios/default
After successful installation, you get the following output:
NAME STATE default Ready
For more installation options, visit the installation guide.
To learn how to use the Istio module, read the documentation in the user
directory.
If you are interested in the detailed documentation of the Istio module's design and technical aspects, check the contributor
directory.
See the Contributing guidelines.
See the Code of Conduct document.
See the license file.