0
0
Kubernetesdevops~10 mins

Istio overview in Kubernetes - Interactive Code Practice

Choose your learning style9 modes available
LearnWhyDeepVisualTryChallengeProjectRecallTime
Practice - 5 Tasks
Answer the questions below
1fill in blank
easy

Complete the code to install Istio's base components using istioctl.

Kubernetes
istioctl install --set profile=[1] -y
Drag options to blanks, or click blank then click option'
Adefault
Bminimal
Ccustom
Dfull
Attempts:
3 left
💡 Hint
Common Mistakes
Choosing 'minimal' installs fewer components, not the full base.
Using 'custom' requires additional configuration.
2fill in blank
medium

Complete the command to label the default namespace for automatic sidecar injection.

Kubernetes
kubectl label namespace default istio-injection=[1]
Drag options to blanks, or click blank then click option'
Aenabled
Btrue
Cauto
Dinject
Attempts:
3 left
💡 Hint
Common Mistakes
Using 'true', 'auto' or 'inject' are not valid values for this label.
3fill in blank
hard

Fix the error in the command to check Istio pods in the istio-system namespace.

Kubernetes
kubectl get pods -n [1]
Drag options to blanks, or click blank then click option'
Adefault
Bistio
Cistio-system
Dkube-system
Attempts:
3 left
💡 Hint
Common Mistakes
Using 'default' or 'kube-system' namespaces will not show Istio pods.
4fill in blank
hard

Fill both blanks to create a VirtualService that routes traffic to service v1.

Kubernetes
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: my-service
spec:
  hosts:
  - my-service
  http:
  - route:
    - destination:
        host: my-service
        subset: [1]
    weight: [2]
Drag options to blanks, or click blank then click option'
Av1
Bv2
C100
D50
Attempts:
3 left
💡 Hint
Common Mistakes
Using weight less than 100 will split traffic.
Choosing subset 'v2' routes to a different version.
5fill in blank
hard

Fill all three blanks to define a DestinationRule with TLS mode set to ISTIO_MUTUAL.

Kubernetes
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: my-service
spec:
  host: my-service
  trafficPolicy:
    tls:
      mode: [1]
      clientCertificate: [2]
      privateKey: [3]
Drag options to blanks, or click blank then click option'
AISTIO_MUTUAL
B/etc/certs/cert-chain.pem
C/etc/certs/key.pem
DDISABLE
Attempts:
3 left
💡 Hint
Common Mistakes
Using 'DISABLE' turns off TLS.
Incorrect file paths cause connection failures.