- Download the Istio release from the releases page and extract
- Apply Custom Resource Definitions:
kubectl apply -f install/kubernetes/helm/istio/templates/crds.yaml
- Install Istio with default mutual TLS authentication:
kubectl apply -f install/kubernetes/istio-demo-auth.yaml
- Enable Istio sidecar auto-injection
kubectl label namespace <namespace> istio-injection=enabled
Create TLS Secret for securing gateway with HTTPS:
kubectl create -n istio-system secret tls istio-ingressgateway-certs --key priv.pem --cert cert.pem
Read more about TLS ingress gateway from Secure Ingress Doc
Read Blog: https://medium.com/@dwdraju/canary-deployment-using-istio-with-helm-796ffa78a01c