Istio is a long wild river: how to navigate it safelyspecifications ● Kubernetes shortcomings with sidecar containers ○ Controlling containers lifecycle ○ Autoscaling pods with sidecar containers ● Are you prepared to handle Istio? ● A full mesh is utopian, know sidecar pattern in a better way, these workarounds should be deprecated. 21 Shortcoming 2: Autoscaling multi-containers pods Stabilizing Istio Kubernetes offers 2 ways to autoscale pods: ● HorizontalPodAutoscaler0 码力 | 69 页 | 1.58 MB | 1 年前3- Istio Service Mesh at Enterprise Scale900+ Teams ● 5000+ Developers ● 200+ Clusters ● 7000+ Namespaces ● ~9200 Nodes varies with autoscaling Hub and Spoke API Gateway Book Info Payments Product Info ✓ Security ✓ Visibility0 码力 | 12 页 | 1.23 MB | 1 年前3
- Istio Security Assessment- deployments/finalizers - ingresses - replicasets - statefulsets verbs: - '*' - apiGroups: - autoscaling resources: - horizontalpodautoscalers verbs: - '*' - apiGroups: - monitoring.coreos.com resources:0 码力 | 51 页 | 849.66 KB | 1 年前3
共 3 条
- 1