Skip to content
ICAInstallation, Upgrade & ConfigurationSingle nodeEasy

Install Istio with istioctl and enable sidecar injection

Scenario ica-ins-001 · about 8 minutes · 8 points · 6 grader checks

Install the Istio control plane with the default profile and bring an existing namespace into the sidecar mesh.

  • istioctl
  • installation
  • default-profile
  • sidecar-injection
  • installation-upgrades-configuration

What you will practise

  • Install Istio with istioctl and a configuration profile
  • Apply an IstioOperator overlay during installation
  • Enable automatic sidecar injection for a namespace and roll existing workloads

Start this lab

With the CLI installed and signed in, this command provisions a single node cluster on your Mac, applies the scenario setup and prints the task below.

goldenkube start ica-ins-001

Task

The task text exactly as the CLI shows it. Solve it on the cluster, then run goldenkube submit.

Istio is not installed on this cluster. The istioctl binary on exam-cp1 is version 1.29.10. 1. Install Istio with istioctl, using the "default" configuration profile, into the namespace "istio-system". Apply the overlay file /opt/ica/lab-sizing.yaml as part of the same installation. 2. Enable automatic sidecar injection for the namespace "shop" (default revision). 3. The Deployments "httpbin" and "curl" in "shop" already exist. Make sure all of their pods run with an injected Istio sidecar.

Requirements and details

Certification
ICA · Istio Certified Associate
Domain
Installation, Upgrade & Configuration
Difficulty
Easy
Cluster topology
Single node
Cluster features
None beyond the base cluster
Recommended time
8 minutes
Points
8
Grader checks
6
Kubernetes version
1.35
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 6 state checks read your cluster when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

Install the CLICreate a free account

More Installation, Upgrade & Configuration labs

ICAInstallation, Upgrade & ConfigurationMedium

Customise the installation and upgrade Istio in place

Write an IstioOperator that changes mesh defaults and gateways, then use it for an in-place upgrade from 1.29.9 to 1.29.10.

Single node · ~10 min · 9 points

  • istiooperator
  • in-place-upgrade
  • meshconfig
  • egress-gateway
  • installation-upgrades-configuration

goldenkube start ica-ins-002

ICAInstallation, Upgrade & ConfigurationHard

Canary upgrade with control-plane revisions

Run a second Istio control plane as a revision and move one namespace to it while another stays on the old revision.

Single node · ~12 min · 10 points

  • canary-upgrade
  • revisions
  • istioctl
  • sidecar-injection
  • installation-upgrades-configuration

goldenkube start ica-ins-003

ICAInstallation, Upgrade & ConfigurationMedium

Install Istio in ambient mode and enrol a namespace

Install the ambient profile and add an existing namespace to the ambient data plane without sidecars.

Single node · ~10 min · 8 points

  • ambient
  • ztunnel
  • istio-cni
  • istioctl
  • installation-upgrades-configuration

goldenkube start ica-ins-004

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.