Skip to content
ICATraffic ManagementSingle nodeMedium

Inject delays and aborts

Scenario ica-trf-006 · about 8 minutes · 8 points · 4 grader checks

Use VirtualService fault injection to delay test traffic and fail half of the remaining requests.

  • fault-injection
  • delay
  • abort
  • virtualservice
  • traffic-management

What you will practise

  • Inject a fixed delay for matching requests
  • Abort a percentage of requests with an HTTP status
  • Verify fault injection from a client

Start this lab

With the CLI installed and signed in, this command provisions a single node cluster on your Mac, applies the scenario setup and prints the task below.

goldenkube start ica-trf-006

Task

The task text exactly as the CLI shows it. Solve it on the cluster, then run goldenkube submit.

Istio is installed. Namespace "faults" (in the mesh) runs the Service "ratings" (port 8000) and the Deployment "curl". Create a VirtualService "ratings" in "faults" for the host "ratings" with two HTTP routes, both sending traffic to "ratings": 1. Requests with the header "x-test: delay" are delayed by a fixed 2 seconds (all of them) and are not aborted. 2. All other requests are aborted with HTTP status 503 in 50 % of the cases.

Requirements and details

Certification
ICA · Istio Certified Associate
Domain
Traffic Management
Difficulty
Medium
Cluster topology
Single node
Cluster features
None beyond the base cluster
Recommended time
8 minutes
Points
8
Grader checks
4
Kubernetes version
1.35
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 4 state checks read your cluster when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

ICATraffic ManagementEasy

Expose a service through the ingress gateway

Publish an in-mesh HTTP service on a host name through the Istio ingress gateway with a Gateway and a VirtualService.

Single node · ~7 min · 7 points

  • gateway
  • virtualservice
  • ingress
  • traffic-management

goldenkube start ica-trf-001

ICATraffic ManagementMedium

Route requests by header to a service version

Define service subsets and send requests of one user to v2 while everybody else stays on v1.

Single node · ~8 min · 8 points

  • virtualservice
  • destinationrule
  • subsets
  • header-routing
  • traffic-management

goldenkube start ica-trf-002

ICATraffic ManagementEasy

Shift 20 percent of traffic to a new version

Split traffic between two versions of a service with weighted routes.

Single node · ~7 min · 6 points

  • traffic-shifting
  • weights
  • virtualservice
  • destinationrule
  • traffic-management

goldenkube start ica-trf-003

ICATraffic ManagementMedium

Lock down egress and register one external host

Switch the mesh to registry-only outbound traffic and allow exactly one external host with a ServiceEntry.

Single node · ~9 min · 9 points

  • egress
  • serviceentry
  • outbound-traffic-policy
  • meshconfig
  • traffic-management

goldenkube start ica-trf-004

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.