March 2020
Intermediate to advanced
626 pages
14h 45m
English
Istio provides us with the option of using a node agent in Kubernetes for certificate and key rotation.
If you are using a demo install profile, the node agent won't be installed by default. To install a node agent, you need to choose values-istio-sds-auth.yaml for the helm install. Once installed, you should see the node agent running on every node. For example, in our single VM, you will see only one node agent:
$ kubectl -n istio-system get pods -l app=nodeagentNAME READY STATUS RESTARTS AGEistio-nodeagent-smfz7 1/1 Running 0 3m35s
The node agent, when deployed, will provision certificates and keys:

The workflow ...
Read now
Unlock full access