Skip to content
ICAInstallation, Upgrade & ConfigurationSingle nodeMedium

Install Istio in ambient mode and enrol a namespace

Scenario ica-ins-004 · about 10 minutes · 8 points · 6 grader checks

Install the ambient profile and add an existing namespace to the ambient data plane without sidecars.

  • ambient
  • ztunnel
  • istio-cni
  • istioctl
  • installation-upgrades-configuration

What you will practise

  • Install Istio with the ambient profile
  • Enrol a namespace in ambient mode
  • Tell ambient capture apart from sidecar injection

Start this lab

With the CLI installed and signed in, this command provisions a single node cluster on your Mac, applies the scenario setup and prints the task below.

goldenkube start ica-ins-004

Task

The task text exactly as the CLI shows it. Solve it on the cluster, then run goldenkube submit.

Istio is not installed on this cluster. The istioctl binary on exam-cp1 is version 1.29.10. 1. Install Istio with istioctl using the "ambient" profile. Apply the overlay file /opt/ica/ambient-sizing.yaml as part of the same installation. 2. Add the namespace "edge" to the ambient mesh. Workloads in "edge" must not get sidecars. 3. The pods of the Deployments "httpbin" and "curl" in "edge" must be captured by the ambient data plane.

Requirements and details

Certification
ICA · Istio Certified Associate
Domain
Installation, Upgrade & Configuration
Difficulty
Medium
Cluster topology
Single node
Cluster features
None beyond the base cluster
Recommended time
10 minutes
Points
8
Grader checks
6
Kubernetes version
1.35
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 6 state checks read your cluster when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

Install the CLICreate a free account

More Installation, Upgrade & Configuration labs

ICAInstallation, Upgrade & ConfigurationEasy

Install Istio with istioctl and enable sidecar injection

Install the Istio control plane with the default profile and bring an existing namespace into the sidecar mesh.

Single node · ~8 min · 8 points

  • istioctl
  • installation
  • default-profile
  • sidecar-injection
  • installation-upgrades-configuration

goldenkube start ica-ins-001

ICAInstallation, Upgrade & ConfigurationMedium

Customise the installation and upgrade Istio in place

Write an IstioOperator that changes mesh defaults and gateways, then use it for an in-place upgrade from 1.29.9 to 1.29.10.

Single node · ~10 min · 9 points

  • istiooperator
  • in-place-upgrade
  • meshconfig
  • egress-gateway
  • installation-upgrades-configuration

goldenkube start ica-ins-002

ICAInstallation, Upgrade & ConfigurationHard

Canary upgrade with control-plane revisions

Run a second Istio control plane as a revision and move one namespace to it while another stays on the old revision.

Single node · ~12 min · 10 points

  • canary-upgrade
  • revisions
  • istioctl
  • sidecar-injection
  • installation-upgrades-configuration

goldenkube start ica-ins-003

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.