Observability with service mesh in Kubernetes - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to label the namespace for Istio injection.

Kubernetes

kubectl label namespace [1] istio-injection=enabled

Drag options to blanks, or click blank then click option'

Amyapp

Bdefault

Ckube-system

Distio-system

Attempts:

3 left

💡 Hint

Common Mistakes

Labeling the wrong namespace so sidecars are not injected.

Using 'istio-system' namespace which is for Istio components only.

Labeling the namespace 'myapp' enables automatic sidecar injection by Istio for pods in that namespace.

2fill in blank

medium

Complete the command to check the status of Istio pods in the istio-system namespace.

Kubernetes

kubectl get pods -n [1]

Drag options to blanks, or click blank then click option'

Adefault

Bmyapp

Cistio-system

Dkube-system

Attempts:

3 left

💡 Hint

Common Mistakes

Checking pods in the wrong namespace and not seeing Istio pods.

Using 'myapp' namespace which is for application pods.

The Istio components run in the 'istio-system' namespace, so checking pods there shows their status.

3fill in blank

hard

Fix the error in the command to view logs of the Istio proxy sidecar container named 'istio-proxy' in pod 'myapp-123'.

Kubernetes

kubectl logs myapp-123 -c [1]

Drag options to blanks, or click blank then click option'

Aistio-proxy

Bsidecar

Cproxy

Denvoy

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect container names causing 'container not found' errors.

Confusing 'envoy' with the container name.

The container name for the Istio sidecar proxy is 'istio-proxy'. Using this name shows the correct logs.

4fill in blank

hard

Fill both blanks to create a ServiceEntry resource that allows external access to example.com on port 80.

Kubernetes

apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:
  name: example-external
spec:
  hosts:
  - [1]
  ports:
  - number: [2]
    name: http
    protocol: HTTP

Drag options to blanks, or click blank then click option'

Aexample.com

B443

C80

Dexternal.com

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong host names or ports like 443 for HTTP.

Confusing port numbers for HTTPS and HTTP.

The host should be 'example.com' and the port number 80 for HTTP access.

5fill in blank

hard

Fill all three blanks to create a VirtualService that routes traffic to service 'reviews' on port 9080 with prefix '/v1'.

Kubernetes

apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: reviews-route
spec:
  hosts:
  - [1]
  http:
  - match:
    - uri:
        prefix: [2]
    route:
    - destination:
        host: [3]
        port:
          number: 9080

Drag options to blanks, or click blank then click option'

Areviews

B/v1

Creviews.default.svc.cluster.local

D/v2

Attempts:

3 left

💡 Hint

Common Mistakes

Using short host names in 'hosts' instead of full DNS names.

Mixing up URI prefixes or destination hosts.

The host in 'hosts' is the full service domain 'reviews.default.svc.cluster.local'. The URI prefix is '/v1'. The destination host is 'reviews'.

Practice

1. What is the main purpose of using a service mesh for observability in Kubernetes?

easy

A. To replace Kubernetes networking completely

B. To deploy applications faster without monitoring

C. To automatically collect metrics, logs, and traces from microservices

D. To store application data persistently

Solution

1. Step 1: Understand service mesh role in observability

   A service mesh helps by automatically collecting data like metrics, logs, and traces from microservices without manual setup.

2. Step 2: Compare options with this role

   Only To automatically collect metrics, logs, and traces from microservices describes this automatic collection for observability. Other options describe unrelated tasks.

3. Final Answer:

   To automatically collect metrics, logs, and traces from microservices -> Option C

4. Quick Check:

   Service mesh observability = automatic data collection [OK]

Hint: Service mesh = automatic monitoring data collection [OK]

Common Mistakes:

• Thinking service mesh replaces Kubernetes networking
• Confusing observability with deployment speed
• Assuming service mesh stores application data

2. Which of the following is the correct command to install Istio's observability components using istioctl?

easy

A. istioctl install --set profile=demo

B. istioctl deploy --profile=observability

C. kubectl apply -f istio-observability.yaml

D. istioctl setup observability

Solution

1. Step 1: Recall Istio installation syntax

   The correct command to install Istio with observability features is 'istioctl install' with a profile like 'demo' that includes observability tools.

2. Step 2: Check options for correct syntax

   istioctl install --set profile=demo matches the correct syntax. Options A and B use invalid commands. kubectl apply -f istio-observability.yaml is generic and not specific to istioctl.

3. Final Answer:

   istioctl install --set profile=demo -> Option A

4. Quick Check:

   Istio install command = istioctl install --set profile=demo [OK]

Hint: Use 'istioctl install --set profile=demo' for observability [OK]

Common Mistakes:

• Using 'deploy' instead of 'install' with istioctl
• Trying kubectl apply without correct manifest
• Assuming 'setup observability' is a valid command

3. Given the following Istio configuration snippet for telemetry, what will be the effect?

apiVersion: telemetry.istio.io/v1alpha1
kind: Telemetry
metadata:
  name: example-telemetry
spec:
  metrics:
  - providers:
    - name: prometheus
    overrides:
      prometheus:
        defaultHistogramBuckets: [0.1, 0.5, 1, 5]

medium

A. Prometheus will ignore histogram buckets and use defaults

B. Prometheus will collect metrics with custom histogram buckets 0.1, 0.5, 1, and 5

C. Telemetry resource will cause an error due to invalid syntax

D. Metrics will be sent to Jaeger instead of Prometheus

Solution

1. Step 1: Analyze the Telemetry resource configuration

   The snippet sets a Telemetry resource specifying Prometheus as the metrics provider and overrides histogram buckets to [0.1, 0.5, 1, 5].

2. Step 2: Understand the effect on Prometheus metrics

   This means Prometheus will collect metrics using these custom histogram buckets instead of defaults.

3. Final Answer:

   Prometheus will collect metrics with custom histogram buckets 0.1, 0.5, 1, and 5 -> Option B

4. Quick Check:

   Telemetry config with overrides = custom Prometheus buckets [OK]

Hint: Overrides in Telemetry change Prometheus buckets [OK]

Common Mistakes:

• Assuming default buckets remain unchanged
• Confusing metrics destination as Jaeger
• Thinking syntax is invalid without error

4. You deployed Istio with observability enabled but notice no traces appear in Jaeger UI. Which of the following is the most likely cause?

medium

A. The application logs are too verbose

B. Prometheus is not scraping metrics correctly

C. The Kubernetes cluster is out of storage

D. Istio sidecar proxy injection is missing on your application pods

Solution

1. Step 1: Identify cause of missing traces in Jaeger

   Jaeger receives traces from Istio sidecar proxies. If sidecars are missing, no traces are sent.

2. Step 2: Evaluate options for trace absence

   Istio sidecar proxy injection is missing on your application pods correctly identifies missing sidecar injection as the cause. Prometheus scraping affects metrics, not traces. Storage or log verbosity do not directly cause missing traces.

3. Final Answer:

   Istio sidecar proxy injection is missing on your application pods -> Option D

4. Quick Check:

   Missing sidecar = no traces in Jaeger [OK]

Hint: No Jaeger traces? Check sidecar injection on pods [OK]

Common Mistakes:

• Blaming Prometheus for trace issues
• Assuming storage issues cause missing traces
• Thinking log verbosity affects tracing

5. You want to monitor request latency across multiple microservices in your Kubernetes cluster using Istio and Prometheus. Which combination of configurations will best achieve this?

hard

A. Enable Istio sidecar injection, configure Prometheus scrape for Istio metrics, and use Grafana dashboards for latency visualization

B. Disable Istio sidecar injection and install Jaeger only

C. Use only Kubernetes native metrics without Istio or Prometheus

D. Configure Prometheus to scrape application logs directly

Solution

1. Step 1: Identify components needed for latency monitoring

   Istio sidecars collect telemetry data. Prometheus scrapes these metrics. Grafana visualizes latency metrics effectively.

2. Step 2: Evaluate options for best observability setup

   Enable Istio sidecar injection, configure Prometheus scrape for Istio metrics, and use Grafana dashboards for latency visualization combines sidecar injection, Prometheus scraping, and Grafana dashboards, which is the standard approach. Other options miss key components or use incorrect methods.

3. Final Answer:

   Enable Istio sidecar injection, configure Prometheus scrape for Istio metrics, and use Grafana dashboards for latency visualization -> Option A

4. Quick Check:

   Sidecar + Prometheus + Grafana = latency monitoring [OK]

Hint: Use sidecar, Prometheus, and Grafana for latency monitoring [OK]

Common Mistakes:

• Disabling sidecar injection breaks telemetry collection
• Relying only on Jaeger for latency metrics
• Scraping logs instead of metrics for latency