Analyze config istio
Analyze Istio configuration for potential issues
istioctl analyze
more istio
all 19 commands →
View Envoy config
istioctl proxy-config all deploy/myapp
Traffic routing — VirtualService
kubectl apply -f virtualservice.yaml
Traffic routing — DestinationRule
kubectl apply -f destinationrule.yaml
Enable mTLS (strict)
kubectl apply -f - <<EOF
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
name: default
namespace: default
spec:
mtls:
mode: STRICT
EOF
Inject sidecar manually
istioctl kube-inject -f deployment.yaml | kubectl apply -f -