Istio: How can I configure NetworkFailPolicy?

3/19/2020

I’m looking for ways to maintain high availability in the case that one of the policy pods is unavailable and found the following information on the official website:

https://istio.io/docs/reference/config/policy-and-telemetry/istio.mixer.v1.config.client/#NetworkFailPolicy

But I did not find any additional information on how to apply these rules in my deployment. Can someone help me with this and tell me how to change these values?

-- KubePony
devops
istio
kubernetes

1 Answer

3/20/2020

What you´re looking for can be found here, in the istio documentation Destination Rules

Specifically check this link


This istio blog about Using Network Policy with Istio redirects us to Calico documentation.

Network Policy is universal, highly efficient, and isolated from the pods, making it ideal for applying policy in support of network security goals. Furthermore, having policy that operates at different layers of the network stack is a really good thing as it gives each layer specific context without commingling of state and allows separation of responsibility.

This post is based on the three part blog series by Spike Curtis, one of the Istio team members at Tigera. The full series can be found here: https://www.projectcalico.org/using-network-policy-in-concert-with-istio/


Additional links which could be useful:

-- jt97
Source: StackOverflow