Service mesh concept overview in Kubernetes - Mini Project: Build & Apply

Service Mesh Concept Overview with Kubernetes

📖 Scenario: You are working in a team managing microservices on Kubernetes. You want to understand how a service mesh helps manage communication between services securely and reliably.

🎯 Goal: Build a simple Kubernetes setup that shows how to label a namespace for a service mesh, configure a service mesh sidecar injection, and verify the mesh is working by checking pod labels and annotations.

📋 What You'll Learn

Create a Kubernetes namespace called demo-namespace

Add a label istio-injection=enabled to the demo-namespace

Deploy a simple pod manifest with a label app: demo-app in demo-namespace

Check that the pod has the service mesh sidecar injected by verifying pod annotations

💡 Why This Matters

🌍 Real World

Service meshes help teams manage microservices communication securely and reliably in Kubernetes clusters.

💼 Career

Understanding service mesh basics is important for roles like DevOps engineers, SREs, and cloud-native developers working with Kubernetes.

1

Create a Kubernetes namespace called demo-namespace

Write a kubectl command to create a namespace called demo-namespace.

Kubernetes

# Your code here

Need a hint?

Use kubectl create namespace followed by the namespace name.

2

Label the demo-namespace with istio-injection=enabled

Write a kubectl command to add the label istio-injection=enabled to the namespace demo-namespace.

Kubernetes

kubectl create namespace demo-namespace
# Your code here

Need a hint?

Use kubectl label namespace with the namespace name and label key=value.

3

Deploy a pod with label app: demo-app in demo-namespace

Write a kubectl command to run a pod named demo-pod with image nginx and label app=demo-app in the namespace demo-namespace.

Kubernetes

kubectl create namespace demo-namespace
kubectl label namespace demo-namespace istio-injection=enabled
# Your code here

Need a hint?

Use kubectl run with --image, --restart=Never, --labels, and -n for namespace.

4

Check the pod annotations to verify service mesh sidecar injection

Write a kubectl command to get the pod demo-pod in demo-namespace with its annotations displayed in JSON format.

Kubernetes

kubectl create namespace demo-namespace
kubectl label namespace demo-namespace istio-injection=enabled
kubectl run demo-pod --image=nginx --restart=Never --labels=app=demo-app -n demo-namespace
# Your code here

Need a hint?

Use kubectl get pod with -o jsonpath to show annotations.