Enable mTLS (strict)

Enforce strict mutual TLS for all workloads in namespace

kubectl apply -f - <<EOF apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: default namespace: default spec: mtls: mode: STRICT EOF
tool
istio19 commands
tags
istioservice-meshmtlssecurity

More istio commands

  • Inject sidecar manually
    istioctl kube-inject -f deployment.yaml | kubectl apply -f -

    Manually inject Istio sidecar into a deployment manifest

  • Dashboard (Kiali)
    istioctl dashboard kiali

    Open Kiali service mesh dashboard in browser

  • Dashboard (Jaeger)
    istioctl dashboard jaeger

    Open Jaeger distributed tracing dashboard

  • View access logs
    kubectl logs -l app=myapp -c istio-proxy | head -50

    View Envoy access logs from the sidecar container

  • Fault injection — delay
    # In VirtualService spec.http[].fault.delay

    Inject artificial delay to test resilience (in VirtualService)

all 19 istio commands