E (Load balancer) www.my-application.com External Traffic 75% 25% Deployment Canary Releases Using Kubernetes Deployment POD POD POD S E R V I C E (Load balancer) www.my-application.com External Deployment Canary Releases Using Kubernetes Deployment POD S E R V I C E (Load balancer) www.my-application.com External Traffic POD POD 0% 100% Deployment Deployment Deployment Canary Releases E R V I C E (Load balancer) www.my-application.com External Traffic 75% 25% POD POD POD POD S E R V I C E (ClusterIP) 75% 25% POD POD Cross-version Traffic My-data-service Service Demo-canary

Prepared by Mark Manning Jeff Dileo Divya Natesan Andy Olsen Feedback on this project? https://my.nccgroup.com/feedback/67b627f7-a0a2-43b7-ad68-af515a9ed2e0 Executive Summary Synopsis In the summer envoy.yaml: | admin: access_log_path: /dev/null address: pipe: path: "@testenvoy" node: cluster: my-cluster id: mystack static_resources: listeners: - name: splitlistener address: socket_address:

page Happy Googlebot: I don’t have to crawl 2 URLs I don’t see an error page Happy SEO specialist: My new URLs get SEO popularity from the old ones and I don’t have to start from scratch New URLs are

unique identifier for the source workload instance. kubernetes://redis- master-2353460263- 1ecey.my-namespace source.ip ip_address Source workload instance IP address. 10.0.0.117 source.labels map[string

VirtualService, DestinationRules, etc. apiVersion: apps.cloud.io/v1 kind: AccessPoint metadata: name: my-accesspoint spec: accessPoints: - name: web-tier scopeIDs: - az1 scopeType: AvailabilityZone

○ protect the resources ○ check what cannot be checked at linter-level (inventory) Please check my last year presentation: “Preparing the guardrails for Istio at scale” (Slides, Video) for more details