Creating the service mesh
With Istio deployed, we are ready to create the service mesh. The steps required to create the service mesh are basically the same as those we used in Chapter 17, Implementing Kubernetes Features to Simplify the System Landscape (refer to the Testing with Kubernetes ConfigMaps, Secrets, Ingress, and cert-manager section). Let’s first see what additions have been made to the Helm templates to set up the service mesh before we run the commands to create the service mesh.
Source code changes
To be able to run the microservices in a service mesh managed by Istio, the dev-env
Helm chart brings in two new named templates from the common
chart, _istio_base.yaml
and _istio_dr_mutual_tls.yaml
. Let’s go through them one by one.
Content in the _istio_base.yaml template
_istio_base.yaml
defines a number of Kubernetes manifests that will be used by both environment charts, dev-env
and prod-env
. First, it defines three Istio-specific security...