Can we use traefik ingress controller instead of istio-ingress gateway? Traffic coming from traefik routers fails when the peerauthentication mode is STRICT in all namespace

Brilliant! THanks for a clear and easy to understand explanation of what I've seen perceived as a relatively obscure and underappreciated setting, but a very important one!

Please make a video for Let's Encrypt as external CA.

Thank you very much - This helped me set it up in our project! Can you please tell me what is that beautiful VSCode Theme?

Hi, is there any way to make sure skaffold dev does not delete your persistent volumes? I find this is a deal-breaker when trying to set up a k8s local environment since it erases all of your data everytime.

Thanks so much!

Hi you explained very well but i have one doubt that where destination rule configuration Please reply me back that helps me to go further in understanding istio

How do we connect to product service from order pod when strict mode was enforced for both services? How do we get the client certificates ?

Thanks for the video, I'm new to Istio and it's very helpful. You've changed the Istio ingress controller service to NodePort and created another service of LoadBalancer. Why not changing the Istio ingress controller service to LoadBalancer with ALB annotation and avoid the need to another service?

How do you get autocomplete in your terminal

How to generate loadbalancer using aws ingress

Great example, finally got working my project 🎉

Your content on istio is the best

Like your videos, because you explain the important things in a good way. Can you do also a video about the descheduler? Because if you use Anti-Affinity or Topology Spread Contraints this is only for the scheduler. If you scale down an application (manual or autoscaling), this rules will not be taken in consideration by the descheduler to keep the high-availability. So imo there is a need to keep also a look at the descheduler if you want high availability when autoscaling.

Your content is superb

Do you think having a gateway for each environment (Dev,uat, prod) is a good decision? Thank you!

This was an excellent explanation know I understand the benefit of istio

Thank you for the video, so helpful

Solid video, really appreciate the overview explanation at the beginning. Subscribed!

Can you answer a question, is it possible to use jaeger + istio, for every request and response event of each microservice? automatic without changing microservice/pod code? How can I look for the configuration I should do?

What protocol you use between communication between services? Rest or gPRC?

Hey dude, you really helped me with setting this up, even better than AWS's Containers from the Couch. You'll probably never see this, but I really appreciate it!

Great video, I'm subscribing ! I was wondering if I could use topology spread constaints to deploy Pods which consume EBS volumes accross multiple availabilty zones ? Say you have 3 redis replicas and you want to spread them into 3 zones so they'll be able to consume their respective volume if a zone goes down ?

Wow. That was a lot to unpack. very well articulated and delivered. Keep up the good work.

Subscribed 😊

Nice work, Mr. Mwila. It would be great if you could provide a walkthrough of the app you're going to mesh!

I have kube installed on my bare metal . I have a rest service running on master mode machine ( not in kube). In kube i have some pods which want to access the rest service. How do pods communicate with on kube rest service on one of the node(master node). Pods are getting host not resolved error.

Great content, thanks a lot :)

about the bridging configuration I didn't have to do it when configuring a cluster without RKE, does kubeadm do it for you when creating a cluster? and even though RKE does all the configuration it doesn't know how to configure the bridging?

if anyone knows please...does istio uses workload to register/deploy application?

Thank @Lukonde for istio content, it helps me

Awesome. please carry on. Ty

Great videos. Keep going :)

Thank you so much for what you doing. That very helpful! Great!

if we scale the nodes do they add to rancher directly?

great video but the guy clearly doesn't reply on his content, I see 2 comments below and still no reply

Do you know how does it work during AZ failure or when specific AWS has capacity issue in a specific AZ?

Nice concise, simple. Great vid. thanks

how can we do it for multi setup environments where clusters resides on different region or different aws accounts?

I saw you on AWS couch channel but didn’t realize you had your own channel. Thanks to ESO page that pointed to this channel…love your content 🙌🏽🚀🔥

Nice explnation and demo!

thanks Lukonde for the excellent content, very well explained.

Please make an video with let's encrypt for ssl. for parent as well as subdomains. Thanks.

Excellent demo. Are you able to do the same for a Multi Cluster Mesh ?

I'm just here to say congrats Luke! You taught me Flutter years ago 😄Your growth in tech has been an inspiration to me and many others 💯 Kubernetes is the new frontier and I'm glad to see that you already have experience in this field 🔥

ArgoCD will self-heal the changes by flagger, how to handle this?

🔥🔥 Amazing!!

and using LENS can I still see the secrets or could it no longer be done?

great tutorial! I think external secrets fits better when you have to manage many kubernetes clusters

Great video :) If we need to access Linux machine from Windows browser (both machines are connected), how can we change from localhost to Linux machine? Using IP does not work, maybe --address param in kubectl?