Injection Process

Injection Process An architecture diagram generated by Archify. Create Deployment · kubectl apply · Architecture component Create Deployment kubectl apply API Server · admission chain · Kubernetes API Server admission chain Mutating Webhook · sidecar-injector.istio.io · Kubernetes Mutating Webhook sidecar-injector.istio.io Sidecar Injector · Istio component · Architecture component Sidecar Injector Istio component Application · container · Created Pod Application container istio-init · init container · Created Pod istio-init init container istio-proxy · sidecar container · Created Pod istio-proxy sidecar container 1 · POST 2 · call 3 · request 4 · mutated spec 5 · return 6 · create Pod 7 · after init 7 · after init Kubernetes Created Pod Legend Backend External

istio-init

  • • Sets traffic redirection rules with istio-iptables
  • • Requires the NET_ADMIN and NET_RAW capabilities

istio-proxy

  • • Envoy sidecar from the istio/proxyv2 image
  • • Injection result recorded in the sidecar.istio.io/status annotation