Istio Service Mesh: 30-Minute Tutorial
Istio in 30 minutes: enough to see what mesh does; not enough to operate one.
Step 1: Install Istio
istioctl install --set profile=demo
Wait for pods.
kubectl label namespace default istio-injection=enabled
Step 2: Deploy bookinfo
kubectl apply -f bookinfo.yaml(sample app from Istio docs).- Pods come up with sidecars (2 containers each).
Step 3: Observe traffic
Open Kiali (Istio dashboard), see service graph live.
Traffic flowing through sidecars; mTLS visible.
Step 4: Apply policy
kubectl apply -f mtls-strict.yaml, enforces mTLS.
Apply traffic-shifting policy, route 10% to v2.
Antipatterns
- Istio in production without ops planning. Steep learning curve.
- Sidecars on stateful workloads. Restart issues.
- Default settings without tuning. Resource overhead.
What to do this week
Three moves. (1) Run the tutorial end-to-end on your own laptop / sandbox. (2) Apply the pattern to one production workload. (3) Document the variations you needed; share with the team.