View access logs

View Envoy access logs from the sidecar container

kubectl logs -l app=myapp -c istio-proxy | head -50

More istio commands

Fault injection — delay

# In VirtualService spec.http[].fault.delay

Inject artificial delay to test resilience (in VirtualService)
Traffic mirroring

# In VirtualService spec.http[].mirror

Mirror traffic to a shadow service for testing
Uninstall Istio

istioctl uninstall --purge -y

Completely remove Istio from the cluster
Traffic routing — VirtualService

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: myapp spec: hosts: - myapp http: - route: - destination: host: myapp subset: v1 weight: 80 - destination: host: myapp subset: v2 weight: 20 EOF

Route 80% traffic to v1, 20% to v2 (canary split)
Traffic routing — DestinationRule

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: myapp spec: host: myapp trafficPolicy: outlierDetection: consecutive5xxErrors: 5 interval: 10s baseEjectionTime: 30s subsets: - name: v1 labels: version: v1 - name: v2 labels: version: v2 EOF

Define subsets and circuit breaker (outlier detection)