Integrate microservices using Istio

Learn how to integrate microservices managed by Istio into a Konvoy cluster

Istio helps you manage cloud-based deployments by providing an open-source service mesh to connect, secure, control, and observe microservices.

This tutorial demonstrates how to expose an application running on the Konvoy cluster using the LoadBalancer (layer-4) service type.

NOTE: Usage and installation of Istio on Konvoy is currently a self-service feature.

Before you begin

Before starting this tutorial, you should verify the following:

  • You must have access to a Linux, macOS, or Windows computer with a supported operating system version.

  • You must have a properly deployed and running cluster. For information about deploying Kubernetes with default settings, see the Quick start.

Deploy Istio

  1. Download the latest release of Istio by running the following command:

    curl -L | ISTIO_VERSION=1.1.8 sh -
  2. Change to the Istio directory and set your PATH environment variable by running the following commands:

    cd istio*
    export PATH=$PWD/bin:$PATH
  3. For this installation, we use the demo configuration profile. It’s selected to have a good set of defaults for testing, but there are other profiles for production or performance testing. Install Istio using the following commands:

    istioctl install --set profile=demo
    kubectl label namespace default istio-injection=enabled

NOTE: Previous documented ways to install Istio with Helm are no longer recommended. This is why we recommend installing Istio here with istioctl instead

Deploy a sample application on Istio

The Istio BookInfo sample application is composed of four separate microservices that demonstrate various Istio features.

  1. Deploy the sample bookinfo application on the Kubernetes cluster by running the following commands:

    kubectl apply -f <(istioctl kube-inject -f samples/bookinfo/platform/kube/bookinfo.yaml)
    kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml
  2. Get the URL of the load balancer created on AWS for this service by running the following command:

    kubectl get svc istio-ingressgateway -n istio-system

    The command displays output similar to the following:

    NAME                   TYPE           CLUSTER-IP    EXTERNAL-IP                                                               PORT(S)                                                                                                                                      AGE
    istio-ingressgateway   LoadBalancer   15020:30380/TCP,80:31380/TCP,443:31390/TCP,31400:31400/TCP,15029:30756/TCP,15030:31420/TCP,15031:31948/TCP,15032:32061/TCP,15443:31232/TCP   110s
  3. Open a web browser and naviage to the external IP address for the load balancer to access the application.

    For example, the external IP address in the sample output is, enabling you to access the application using the following URL:

  4. Follow the steps in the Istio BookInfo Application documentation to understand the different Istio features.