►
From YouTube: IBM Sponsored Session - Dramatic UX Improvement and Analytics-driven Canary Deployment... Dan Berg
Description
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects
IBM Sponsored Session - Dramatic UX Improvement and Analytics-driven Canary Deployment with Istio - Dan Berg, IBM
With the latest Istio releases, it has never been this easier to onboard microservices to Istio, and to seamlessly transition from plain traffic to mTLS traffic among microservices. Need to roll out new changes to your microservices, don’t panic! Combine with analytics, you can make intelligent decisions on your canary deployment. This talk will show demos on how Istio dramatically improve UX and how to leverage analytics to make intelligent decisions for canary deployment.
A
Okay,
so
I've
got
a
true
lightning
talk,
five
minutes,
so
we're
gonna
keep
this
short
and
sweet,
and
what
I
wanted
to
talk
about
are
some
of
the
improvements
that
we
made
in
the
SEO
community
and
a
new
project
that
we're
working
on
to
do
canary
deployments
with
SDO.
So
first
off
the
community
release,
one
of
the
things
you'll
notice
about
is
do,
and
the
community
releases
is
that
the
project
has
actually
gone
better
about
having
irregular
cadence.
A
You
can
see
from
here,
after
one,
oh
and
even
before,
one
o
the
gap
between
100
and
one
one
was
quite
large
and
we've
been
working
very
hard
to
get
a
regular
Kate,
and
so
you
can
understand
and
actually
predict
when
the
next
versions
are
coming
out
and
we're
getting
we're
getting
actually
really
good
about
it.
If
you
haven't
seen
already
is
tío
1.4
went
out
this
month,
so
highly
recommend
going
and
getting
that
a
couple
things
that
I'm
going
to
discuss
a
few
things
about
is
to4
1.4.
A
One
of
the
things
is
the
new
operator.
So
this
is
something
that
we've
been
working
on
to
improve
the
installation
and
management
of
the
control
plane.
As
part
of
it,
you
can
install
there's
a
new
is,
do
control,
plane,
resource
and
through
that
you
can
install
the
entire
control
plane,
leveraging
very
simple
profiles.
You
can
list
out
the
profiles
from
the
sto
CTL
and
then
even
from
that,
you
can
do
updates
as
well,
which
is
really
nice,
because
through
that
CR
you
can
go
in
and
you
can
modify
some
of
the
settings.
A
A
lot
of
the
settings
of
the
control
playing
perfect
example
in
here
you're
turning
off
telemetry
as
an
example.
Again,
this
is
experimental.
Try
it
out
give
us
some
feedback,
we're
really
excited
about
it.
I've
been
using
it
now
for
a
couple
weeks,
and
it's
been,
it's
been
really
nice
great
experience,
there's
also
a
number
of
UX
improvements
that
we
wanted
to
go
through
and
and
make
sure
you're
aware
of
them,
because
it
really
does
simplify
the
usage
and
experience
with
using
this.
A
Do
and
I'm
gonna
go
through
each
of
these,
so
first
off
add
demisch.
That
was
a
discussion.
I
know,
as
Ben
was
just
doing
the
sidecar,
and
there
was
a
question
about
adopting.
Could
you
have
something
in
the
mash
and
out
of
the
mash?
Well,
that
was
one
of
the
complaints
that
we
heard
that
it
was
actually
difficult
to
add
services
into
the
mash
in
an
incremental
fashion.
So
Adam
s
is
tio
CTL
command.
A
That
allows
you
to
go
in
service
by
service
and
add
it
into
the
mesh,
and
it
will
automatically
do
the
sidecar
injection
for
you.
So
here's
a
view
of
a
set
of
pods
that
you'll
see
one
in
one.
There's
no
sidecar,
you
do
the
add
mesh
with
the
service
and
it
will
automatically
update
deployment
and
it
will
roll
that
in
with
the
new
sidecar,
and
you
can
do
that
one
at
a
time
and
then
it's
the
corresponding
removed
from
mesh
as
well.
So
you
can
remove
services
from
the
mesh.
A
This
avoids
having
to
turn
on
the
automatic
sidecar
injector.
If
you
don't
want
to
use
that
is
do
analyze.
This
is
under
the
experimental
view
in
Sto,
sto
CTL
and
what
it
does
is
it
allows
you
to
analyze
your
namespace.
It
analyzes
a
live
cluster,
it'll
analyze,
your
yamo
files,
it'll
even
do
and
analyze
of
the
live
cluster
and
the
outcome.
If
you
try
to
apply
a
yamo
file,
it'll
go
through
and
it
analyzes
again.
A
This
is
experimental,
but
it's
something
that
we're
pulling
forward
from
a
community
to
make
it
easier
to
work
with
the
clusters
and
to
figure
out
if
something's
wrong.
Here's
an
example
here
where
I'm
analyzing
the
live
cluster
I,
put
it
in
verbose
mode.
So
you
can
see
all
the
analyzers
more
will
be
coming
in
the
future,
but
you
can
see
at
the
bottom
here.
It
spits
out
an
error
that
was
found
that
I
have
a
virtual
service,
that's
referencing
a
gateway
and
the
Gateway
doesn't
exist.
It
hasn't
been
defined.
A
So
there
there's
really
nice
things
in
here
to
help
you
catch
problems,
early
sdo
dashboard.
Have
anyone
used
the
est
au
CTL
dashboard
command?
There
are
a
few
you
gotta
go.
Do
this
this
one's
fun
so
is
Co.
Ctl
dashboard
is
a
very
simple
way
of
launching
all
the
really
nice
UI
tools,
and
some
of
them
are
new
in
here.
If
you
haven't
seen
it
recently,
so
if
you
do
the
help
you
can
get
the
list
of
dashboards
are
available.
A
These
are
like
key
Olly
Jaeger,
Prometheus,
Zipkin
I'm,
but
then
there's
other
ones
in
here
as
well
with
the
envoy
admin.
So
again
is
Co.
Ctl
dashboard,
key
Olli
it'll
do
all
the
proxying
for
you
and
then
it
will
launch
the
UI
in
your
local
browser.
This
is
one
of
my
favorite
ones.
This
is
one
that
I
has
been
added
recently
and
that's
the
Envoy
admin
dashboard
you.
A
A
Describe
we'll,
go
in
and
tell
you
information
about
your
pod
or
your
service.
In
this
example,
you
can
do
a
describe
on
a
service
and
it's
telling
me
which
ports
are
defined.
It
tells
me
that
I
have
a
destination
rule.
That's
turned
on
and
it's
telling
me
my
traffic
policies
are
permissive
as
well
as
clients
are
using
disabled.
So
there's
no,
it's
it's
sending
HTTP
traffic
and
the
pods
themselves
are
permissive
now
going
along
with
that
is
our
new
Auto
mutual
TLS
client
configuration.
This
is
one
of
my
favorites.
A
So
if
you
go
in
and
you
modify
the
sto
configuration
map,
you
can
turn
on
auto
mutual
TLS
and
then
in
here,
if
you
have,
it
turned
on
again
I
describe
that
same
service,
and
here
you'll
notice
that
the
clock
it
says
and
I've
also
enabled
strict
security.
So
in
this
case
strict
security
was
turned
on,
but
the
clients
are
configured
automatically.
You
can
see
that
in
the
describe
and
if
you
go
and
you
analyze
do
the
TLS
check
you
can
see
here
that
the
status
is
auto.
A
The
server
is
strict
in
this
case,
and
the
authentication
policy
is
the
default
in
the
namespace,
which
is
turning
on
the
strict
policy
enforcement.
But
what's
great
here
is
I
did
not
have
to
define
a
destination
rule
is
do
because
they'll
automatic
mutual
TLS,
the
clients
will
automatically
send
either
cryptid
or
non-encrypted
traffic
based
on
the
target
server.
Okay.
A
Lastly,
a
new
project
that
we've
introduced
in
IBM,
it's
coming
out
of
IBM
Research,
it's
called
iterate.
You
can
find
the
landing
page
here,
I
iterate,
dot
tools,
it's
basically
a
tool
that
will
extend
and
leverage
sto
to
help
you
drive
canary
deployments
and
here's
an
example
of
the
yamo
file.
It
actually
defines
the
experiment
through
a
yamo
file
and
through
that
experiment
you
can
actually
drive
rolling
out
a
new
version
in
sto,
based
on
analytics
real
analytics
that
are
coming
through
and
in
the
experiment.
A
Through
the
yamo
you
describe
what
the
metrics
are
going
to
be
observed.
How
is
it
going
to
be
observed
and
how
you
do
the
transition
of
the
new
version
as
you
rolling
it
out?
It
has
built-in
dashboards
as
well,
so
you
can
actually
model
and
see
the
variations
of
the
experiment
as
it's
flowing
so
go
check
it
out.
A
Lastly,
if
you
haven't
downloaded
this
Geo
1.4,
please
do
if
you
want
to
learn
more
about
iterate,
go
to
this
link
here,
the
iterate
tools,
slash
Doc's
and
a
plug.
When
and
myself
have
recently
wrote
a
book
called
sto
explained
preview
Edition
is
available
now
and
hopefully
the
book
will
be.
You
know
when
it's
gonna
be
out
soon
december
december.
Ish
so
go
check
that
out
as
well.
It
helps
you
understand
a
little
bit
more
about
is
to
you
on
how
to
adopt
it.
Thank
you
very
much.