Azure kubernetes - Istio & multiple kubernetes applications?

Question

I am trying to deploy multiple applications on Azure kubernetes and each application will have its own namespace and nodes (based on the nodeselector, taint & tolerance).

I am also planning to deploy Istio service mesh along with the individual applications on the application specific namespace.

Somehow I could not make the decision on where and how many times Istio should be deployed.

Being Istio a service mesh, it should support multiple host/applications. However, I also want to maintain clear the segregation between the application as much as possible.

Should I go ahead and deploy Istio along with the individual applications?

Answer 1

Usually the Istio control plane would be installed in its own namespace highly available one time. This means with multiple instances of its components. Istio itself deploys envoy proxies with each istio enabled application that send their corresponding metrics to the deployed control plane. Hence I would advise you to install the control plane just one single time in a seperated namespace, additionally that corresponds with the segregation strategy you pursue with your applications as well.

As for how to enable istio with your applications take a look at the following document: https://istio.io/latest/docs/setup/additional-setup/sidecar-injection/

You have two options:

1. Installing the sidecar containers manually.
2. Let the sidecars be injected automatically.