Advanced Scenarios

In a multi-primary deployment, you want to ensure that traffic between clusters is encrypted via mTLS. Which resource must be configured on both clusters?

When migrating to the Kubernetes Gateway API in Istio, you define a Gateway resource. Which component is responsible for translating this Gateway resource into Envoy configuration?

You are using Kiali to debug a service mesh. You notice a red line between two services. What does this indicate?

When using Kubernetes Gateway API with Istio, which resource acts as the entry point for incoming traffic?

In a multi-tenancy setup, which Istio resource should you use to restrict which namespaces a sidecar can see?

You are implementing multi-tenancy using Istio Namespaces. To ensure strict isolation where Service A in Namespace X cannot send traffic to Service B in Namespace Y, what is the best approach?

In a primary-remote multi-cluster deployment with a shared control plane, a remote cluster service is unreachable. You observe the ServiceEntry is created correctly, but the remote cluster does not have the corresponding Service object. What is the most likely cause?

You are configuring Jaeger for distributed tracing in Istio. You observe that traces are missing spans for external service calls. What is the most likely cause?

How can you verify the current configuration being pushed to an Envoy sidecar without using Kiali?

What is the primary function of the 'PeerAuthentication' resource?

In a multi-cluster environment with a shared control plane, what is the purpose of the 'istio-remote-secret'?

In a multi-cluster Istio setup, you notice that service 'A' in cluster 1 cannot communicate with service 'B' in cluster 2, even though 'Cross-Cluster' is enabled. The logs show '404 Not Found'. What is the most likely reason?

Which component in Istio is responsible for collecting telemetry data and sending it to observability tools like Prometheus?

You are debugging a performance issue and suspect Envoy is buffering too much data. Which filter settings might be causing this?

You notice that your Kiali dashboard shows services as 'missing'. What is a likely cause?

When using Istio with Kubernetes Gateway API, which object handles traffic routing rules based on path prefixes?

What is the result of setting 'outlierDetection' in a DestinationRule?

Which Istio component handles the generation of xDS configuration?

What is the main advantage of using Istio's 'locality-aware load balancing'?

When inspecting Envoy stats, what does 'upstream_rq_timeout' represent?

You need to integrate an external database into the mesh that does not support mTLS. How do you configure it securely?

You observe that your sidecars are crashing due to 'Out of Memory' (OOM). What is a likely configuration error?

Which tool allows you to perform traffic shifting between two versions of a service?

You want to force all traffic to an external service to go through an EgressGateway. What is required?

Which command is used to restart an Istio sidecar without restarting the application container?

What is the purpose of the 'PILOT_ENABLE_MTLS_OVERRIDE' environment variable in istiod?

Which THREE components are critical for establishing a secure multi-cluster 'primary-remote' configuration?

When configuring a Gateway API resource, which TWO properties are defined within the 'listeners' block?

When configuring a multi-cluster mesh, what does a 'ServiceEntry' with 'location: MESH_EXTERNAL' signify?

You are troubleshooting a service that is failing to communicate with another service in a different namespace. Which TWO of the following items should you check to ensure connectivity?

Which TWO settings in a DestinationRule are used for load balancing?

When using Kiali to debug service communication, which TWO metrics are most useful for identifying performance bottlenecks?

Which THREE configuration areas are essential for ensuring observability in a complex Istio mesh?

Which TWO actions can be taken via the 'istioctl' command to debug mesh health?

Which THREE of the following are valid ways to control egress traffic in Istio?

Which TWO pieces of information are displayed in the Kiali 'Graph' view?

Which THREE features does the Kubernetes Gateway API offer that are significantly different from legacy Ingress?

Which THREE items are required to configure mTLS for an external service that is being added to the mesh?

When designing for high availability in a multi-cluster Istio mesh, which THREE strategies are recommended?