#IstioCon Building resilient systems inside the mesh: abstraction and automation of Virtual Service generation Vladimir Georgiev, Thought Machine #IstioCon Sync calls failures inside the mesh

computers, especially interface design. I started working on Istio last summer. Istio.io Work Automation Indicator #7734 Add IBM Cloud Kubernetes Service specific instructions for node port Ingress Meeting Agendas and Recordings are available #IstioCon Commits ● Small Commits - Documentation fixes, UI adjustments #IstioCon Commits ● For anything larger or bug fixes, create an issue and ask around with a test ● make test_status ● make snips #IstioCon The Pull Request Process ● Viewing changes as if they were live ● Linter is pretty specific ● Don't forget to update/create a test if the page

of Done #IstioCon Upgrade Working Group Mission: To improve the stability, user experience, and test infrastructure around Istio upgrades #IstioCon Upgrade Working Group - Stability ● Standards and upgrades ● Update or create documentation on upgrades across all supported methods ○ Test documentation using istio.io test framework #IstioCon Upgrade Working Group - User Experience ● Add pre-checks to about known potential issues ○ Provide a clear path forward #IstioCon Upgrade Working Group - Test Infrastructure ● Extend and improve the testing infrastructure ● Extend and add testing of upgrades

terminationGracePeriodSeconds to 90 seconds. 20 Warning: These are workarounds, not solutions! Stabilizing Istio Test before using! These workarounds are based on the Kubernetes pod/container lifecycles and only recommended performance. ● Default -> 2 ● For minimal performance impact -> Workers = vCPU (1 worker/vCPU) ● Load test your workloads at different level of concurrency and resources ● Account for RPS/pod when calculating services are erratic with Istio, use ClusterIP services instead, plan the migration wisely ● Use automation pipelines to label Deployments for traffic shifting ● Istio has a risky default retry policy

Destination Rule ● Blocked ○ Envoy Filters ○ Gateways Developer Platform Integration ● Mesh Automation ○ Control Plane Install/Upgrade ○ Admiral cluster registration ● Higher Level Logical Service

Endpoint accessed by service via config #IstioCon Latency improvement #IstioCon Tooling and Automation ● Automate the Istio setup during Kubernetes cluster creation ● Automated endpoint config creation

component tests adds up very quickly • What happens if you do not address the problem? – Thorough test coverage can take a lot of time and effort – Realistic outcome: Just create E2E tests • What is data – 10x speed in creating API tests • Can also be sped up by just navigating the application UI – Create E2E tests, component tests and service tests from the same data • Key product benefits (#releases and cost for API testing for microservices architectures with Istio – Fewer failures higher up the test pyramid as a result of improved API tests • Istio benefits – Venky / Prasad – point here • Demo

com/apache/incubator- skywalking-query-protocolEcosystem powered by GraphQL and SkyWalking core • Open source UI project for SkyWalking • https:// github.com/ TinyAllen/ rocketbotServiceMesher公众号 SOFAStack公众号

Multi-cluster and VM (lower onboarding cost) ○ Enterprise team structure gap (Workspace, Tenants, etc) ○ UI&UX Background ● Leads to complexity and lack of operational agility ● You can't be Cloud Native

核心组件少安装简单，轻量的架构赋予SolarMesh极低的资源占用以及极低的维护成本 •规范 标准的istio规范操作，实时反映真实集群状态，告别terminal。 •便捷 一键安装，UI操作，流量策略模板复用，批量设置 •多集群支持，零成本接入 流量视图提供统一的拓扑图界面，让您的视角可以统揽全局 •附加组件 •Jaeger，为SolarMesh提供分布式链路追踪的能力