Analyze config

Analyze Istio configuration for potential issues

istioctl analyze
tool
istio19 commands
tags
istioservice-meshanalyzedebug

More istio commands

  • View Envoy config
    istioctl proxy-config all deploy/myapp

    Show complete Envoy proxy config for a deployment

  • Traffic routing — VirtualService
    kubectl apply -f virtualservice.yaml

    Apply a VirtualService to define traffic routing rules

  • Traffic routing — DestinationRule
    kubectl apply -f destinationrule.yaml

    Apply a DestinationRule to define load balancing and circuit breaker policies

  • Enable mTLS (strict)
    kubectl apply -f - <<EOF apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: default namespace: default spec: mtls: mode: STRICT EOF

    Enforce strict mutual TLS for all workloads in namespace

  • Inject sidecar manually
    istioctl kube-inject -f deployment.yaml | kubectl apply -f -

    Manually inject Istio sidecar into a deployment manifest

all 19 istio commands