install

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13


# install cli
mise use -g istioctl@1.26.2


# install gateway api
kubectl get crd gateways.gateway.networking.k8s.io &> /dev/null || \
  kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.3.0/standard-install.yaml

# pre check
istioctl version

# install istio
istioctl install --set profile=ambient --skip-confirmation

Deploy a sample application

https://istio.io/latest/docs/ambient/getting-started/deploy-sample-app/

1
2
3
4
5
6
7
8
9


kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.26/samples/bookinfo/platform/kube/bookinfo.yaml
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.26/samples/bookinfo/platform/kube/bookinfo-versions.yaml

kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.26/samples/bookinfo/gateway-api/bookinfo-gateway.yaml
kubectl annotate gateway bookinfo-gateway networking.istio.io/service-type=ClusterIP --namespace=default

# access service
kubectl port-forward svc/bookinfo-gateway-istio 8080:80
http://localhost:8080/productpage

Secure and visualize the application

Add Bookinfo to the mesh

1

kubectl label namespace default istio.io/dataplane-mode=ambient

Visualize the application and metrics

1
2


kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.26/samples/addons/prometheus.yaml
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.26/samples/addons/kiali.yaml

issue

for cilium with kube-proxy replace, need change config https://docs.cilium.io/en/stable/network/servicemesh/istio/#gsg-istio

Last updated on 2025 Aug 17

introduction cepf introduction linkerd