CKA Service Mesh Basics 2

Question 1

In Istio, which component is responsible for distributing configuration to all Envoy proxies in the mesh?

Accepted Answer

Pilot

Answer

Istio Pilot (now part of istiod) translates high-level routing rules into Envoy-specific configuration and pushes it to all sidecar proxies.

Question 2

Which Kubernetes resource does Istio use to define traffic routing rules such as weight-based canary splits?

Accepted Answer

VirtualService

Answer

VirtualService defines how requests are routed to a service, including traffic splitting, retries, and fault injection.

Question 3

What is the primary purpose of a DestinationRule in Istio?

Accepted Answer

Define policies applied after routing, such as load balancing and TLS settings

Answer

DestinationRule configures post-routing policies like connection pooling, outlier detection, and TLS mode for a destination service.

Question 4

In a service mesh, what does mTLS stand for and what problem does it solve?

Accepted Answer

Mutual TLS; it ensures both client and server authenticate each other

Answer

Mutual TLS requires both the client and server to present certificates, enabling two-way authentication and encrypted communication.

Question 5

Which Istio resource would you use to expose an HTTP service running inside the mesh to external clients?

Accepted Answer

Gateway

Answer

An Istio Gateway configures a load balancer at the edge of the mesh to handle incoming or outgoing connections from external traffic.

(CKA) Certified Kubernetes Associate Practice Test