Posts
Thomas Stringer
Cancel

Kubernetes Taints, Tolerations, and Understanding the PreferNoSchedule Effect

Within a Kubernetes cluster, it is common to want to stop pods from being scheduled on a node, or even terminated if they are already scheduled. These are referred to as taints (on the node) and to...

List Prometheus Scraping Targets

When working with Prometheus, oftentimes you’re dealing with dynamic targets. The most common example of that is Kubernetes targets with the kubernetes_sd_config configuration. Even if your Prometh...

Troubleshooting Error 'Jwt issuer is not configured' in Istio and Envoy

Recently I was troubleshooting the following error: Jwt issuer is not configured I had created the following RequestAuthentication resource prior to this: apiVersion: security.istio.io/v1bet...

Get Istio's Internal Service Registry

Istio maintains an internal service registry that it uses to configure the data plane proxies. This service registry is the center of a lot of operations: For instance, when dealing with external t...

Restrict Routes to JWT-Authenticated Principals and Allow Unauthenticated Requests to Other Routes

For most applications, authentication (and authorization) have a significant role. Usually, there are certain groups of users that can access a particular resources. But sometimes you might have ot...

Nested URL Routes to Different Services with Istio

In a microservices world, it is common to have nested URL routes going to various different services. Let’s take this example: In this case, you want your HTTP requests for /hello/world/* to go ...

Store Helm Charts in GitHub Container Repository

Utilizing Helm charts to deploy software to Kubernetes applications is a great way to manage and maintain your applications. One of the main components of this workflow is a registry where you need...

Install Istio with Flux

There are a couple of ways to install Istio in your cluster. The first, and most common way, is with istioctl. But you can also install Istio through a few Helm charts. Sure, you can install these ...

Deploy Istio Egress Gateway After Installation

When working with Istio, it’s common to kick off a new installation with the default profile: $ istioctl install -y ✔ Istio core installed ...

Go Slices - Passing By Reference or Value?

Go is a powerful language, and most parts of it are very intuitive. But one of the things that can cause some confusion for many Go programmers (especially those new to the language) is how slices ...