March 2020
Intermediate to advanced
626 pages
14h 45m
English
Instead of blanket denial to an external service, it is possible to allow access to certain external services using Istio's ServiceEntry configuration. To control access to the external services, we need to set mode: REGISTRY_ONLY, which we did in the previous section. Let's take a look:
# Script : 15-http-service-entry-for-httpbin.yamlapiVersion: networking.istio.io/v1alpha3kind: ServiceEntrymetadata: name: httpbinspec: hosts: - httpbin.org ports: - number: 80 name: http protocol: HTTP resolution: DNS location: MESH_EXTERNAL
$ kubectl -n istio-lab apply ...
Read now
Unlock full access