Skip to content
ICAInstallation, Upgrade & ConfigurationSingle nodeMedium

Customise the installation and upgrade Istio in place

Scenario ica-ins-002 · about 10 minutes · 9 points · 7 grader checks

Write an IstioOperator that changes mesh defaults and gateways, then use it for an in-place upgrade from 1.29.9 to 1.29.10.

  • istiooperator
  • in-place-upgrade
  • meshconfig
  • egress-gateway
  • installation-upgrades-configuration

What you will practise

  • Customise an installation with an IstioOperator manifest
  • Set mesh-wide defaults through meshConfig
  • Enable and disable gateway components
  • Upgrade Istio in place and roll the data plane

Start this lab

With the CLI installed and signed in, this command provisions a single node cluster on your Mac, applies the scenario setup and prints the task below.

goldenkube start ica-ins-002

Task

The task text exactly as the CLI shows it. Solve it on the cluster, then run goldenkube submit.

Istio 1.29.9 runs in "istio-system" (default revision). It was installed from /opt/ica/mesh.yaml. The istioctl on the PATH is version 1.29.10. 1. Write an IstioOperator manifest to /opt/ica/istio-custom.yaml. Start from /opt/ica/mesh.yaml (keep its profile and resource requests) and add: - Envoy access logs written to /dev/stdout, mesh-wide; - application containers start only after their sidecar is ready, as the mesh-wide proxy default; - the gateway "istio-ingressgateway" is not installed; - an egress gateway named "istio-egressgateway" is installed. 2. Upgrade the control plane in place to 1.29.10 with this manifest. Do not use a revision. 3. Restart the Deployments in namespace "orders" so that every pod runs the 1.29.10 sidecar.

Requirements and details

Certification
ICA · Istio Certified Associate
Domain
Installation, Upgrade & Configuration
Difficulty
Medium
Cluster topology
Single node
Cluster features
None beyond the base cluster
Recommended time
10 minutes
Points
9
Grader checks
7
Kubernetes version
1.35
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 7 state checks read your cluster when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

Install the CLICreate a free account

More Installation, Upgrade & Configuration labs

ICAInstallation, Upgrade & ConfigurationEasy

Install Istio with istioctl and enable sidecar injection

Install the Istio control plane with the default profile and bring an existing namespace into the sidecar mesh.

Single node · ~8 min · 8 points

  • istioctl
  • installation
  • default-profile
  • sidecar-injection
  • installation-upgrades-configuration

goldenkube start ica-ins-001

ICAInstallation, Upgrade & ConfigurationHard

Canary upgrade with control-plane revisions

Run a second Istio control plane as a revision and move one namespace to it while another stays on the old revision.

Single node · ~12 min · 10 points

  • canary-upgrade
  • revisions
  • istioctl
  • sidecar-injection
  • installation-upgrades-configuration

goldenkube start ica-ins-003

ICAInstallation, Upgrade & ConfigurationMedium

Install Istio in ambient mode and enrol a namespace

Install the ambient profile and add an existing namespace to the ambient data plane without sidecars.

Single node · ~10 min · 8 points

  • ambient
  • ztunnel
  • istio-cni
  • istioctl
  • installation-upgrades-configuration

goldenkube start ica-ins-004

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.