Kubernetes Container Orchestration Service Mesh 3

Question 1

What is the function of a 'ServiceEntry' in Istio?

Accepted Answer

Register an external service so mesh proxies can route to it

Answer

ServiceEntry adds external services (outside the mesh) to Istio's service registry so that proxies can manage traffic to them.

Question 2

Which observability feature is automatically provided by most service meshes without code changes?

Accepted Answer

Distributed tracing and golden signal metrics

Answer

Service meshes capture distributed traces and golden signals (latency, traffic, errors, saturation) at the proxy layer transparently.

Question 3

In Istio, what does setting 'trafficPolicy.outlierDetection' on a DestinationRule achieve?

Accepted Answer

Enables circuit breaking by ejecting unhealthy hosts from the load balancing pool

Answer

Outlier detection in Istio monitors host health and automatically removes hosts that exhibit errors from the load balancing pool (circuit breaking).

Question 4

What is the default sidecar proxy used by Istio?

Accepted Answer

Envoy

Answer

Istio uses Envoy proxy as its data plane sidecar, leveraging its rich features for traffic management, observability, and security.

Question 5

How does a service mesh handle traffic between two services that belong to different namespaces?

Accepted Answer

The mesh proxies intercept and route cross-namespace traffic transparently

Answer

Service mesh proxies intercept all traffic at the pod level, so cross-namespace communication flows through the mesh just like same-namespace traffic.

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration Service Mesh 3