March 2020
Intermediate to advanced
626 pages
14h 45m
English
The advantage of using Istio's Secret Discovery Service (SDS) process is that there is no need to mount Kubernetes secrets in pods. The gateway agent monitors all of the secrets that are defined in the Ingress gateway and sends them to the Ingress gateway, which can dynamically add, delete, or update key/certificate pairs and its root certificate.
The demo profile that we used during the Istio installation does not enable SDS by default. We can enable it by applying the generated YAML using the values in the -istio-sds-auth profile. Let's get started:
$ cd ~/istio-$ISTIO_VERSION$ helm template install/kubernetes/helm/istio/ ...
Read now
Unlock full access