Istio

Term 2 · Jun-Aug · 2 projects

• Expand testing for Multi-Cluster in Ambient

  LFX Mentorship · Listed in the official cohort

  @stevenjin8Source IssueLFX portal

  | Istio is a service mesh platform used by thousands of companies to secure and manage their microservices traffic, most often in a single Kubernetes cluster. However, the ability to operate across multiple clusters is an important feature in Istio's traditional Sidecar mode, and work to support it in Istio's Ambient mode is making rapid progress. To call any feature complete, comprehensive testing is needed. Given that multicluster Istio Ambient is a new mode of operating, we will need to both adapt tests for existing features to ensure they work across multiple clusters, as well as identify multi-cluster specific scenarios we want to codify in tests. These kinds of tests exist mode in both the main Istio repository, as well as in the istio.io website's repository. The docs tests are equally as important, as they prove that the instructions we give to users actually work. expectedOutcome: Audit existing ambient integration tests for cases that do not support multi-cluster testing patterns. Refactor those tests, using Istio's testing infrastructure to cover features within a multi-cluster environment. Work with Istio maintainers to identify opportunities for testing new scenarios that exist only for ambient multi-cluster. As documentation is written for verify that the user instructions (kubectl commands, YAML snippets, etc.) actually work end-to-end. Gain hands-on experience with Istio's codebase, service mesh architectures, and Kubernetes multi-cluster patterns. Help us catch regressions and bugs

  • Go
  • Kubernetes
  • Istio
  • Basic networking knowledge

• Update documentation CMS build pipeline

  LFX Mentorship · Listed in the official cohort

  @craigboxSource IssueLFX portal

  istio.io is a large application in and of itself: static content is available in three languages with multiple versions, and a large testing infrastructure acts as the end-to-end testing for the Istio project, validating that the project works as documented whenever an update is made to the docs or Istio itself. In this project, you will be mentored towards maintainership of the Istio documentation build pipeline, including completing recently started work on multi-version availability and its integration with search engines, bringing the tooling for the deployment pipeline up to date, and laying groundwork for large content changes as ambient mode moves towards the default.

  • Integration
  • Systems engineering
  • scripting
  • programming (Bash/go)
  • Hugo templating

Term 1 · Mar-May · 3 projects

• Implement new site search

  LFX Mentorship · Listed in the official cohort

  @craigboxSource IssueLFX portal

  Up to four versions of Istio are supported at one time, and so the documentation for each must be available. Our current site search is outdated and needs to be replaced, so that the search content only exists in the site search, and only fresh content is available on google.com.

  • Hugo
  • Systems engineering
  • scripting
  • programming (Bash/go)
  • Hugo templating

• Improve documentation build infrastructure

  LFX Mentorship · Listed in the official cohort

  @craigboxSource IssueLFX portal

  The build infrastructure for istio.io currently carries a complete archived copy of the site for each release of Istio. These archived versions should be separated to their own branch, with only the supported versions published. We should also separate out content which is not version-specific (e.g. the home page, news and blogs) so that only the latest version of this content is visible online.

  • Systems engineering
  • scripting
  • programming (Go/Bash)
  • Hugo templating

• Support TLS for Istio metrics endpoints

  LFX Mentorship · Listed in the official cohort

  @kfaseelaSource IssueLFX portal

  Istio extends Kubernetes to establish a programmable, application-aware network. Working with both Kubernetes and traditional workloads, Istio brings standard, universal traffic management, telemetry, and security to complex deployments Istio does not support HTTPs based metric scraping for control plane, gateway, and Envoy sidecar metrics This could have some security related consequences: An attacker might find some sensitive information that they can use for their advantage. For example, Envoy /stats endpoint can be used to enumerate all upstream services in the cluster. In theory an attacker could masquerade the metrics endpoint(s) and inject fake data to monitoring systems, in order to e.g. hide an ongoing attack, confuse the system to autoscale up/down etc. It would be nice to protect the metrics endpoints with TLS, using mutual authentication. While this feature is a big one covering multiple components, the easiest component alone is intended to be covered as part of this internship.

  • Rust
  • Go
  • scripting
  • Kubernetes
  • Istio Ambient basics.

Term 3 · Sep-Nov · 2 projects

• Implement new site search

  LFX Mentorship · Listed in the official cohort

  @craigboxSource IssueLFX portal

  Up to four versions of Istio are supported at one time, and so the documentation for each must be available. Our current site search is outdated and needs to be replaced, so that the search content only exists in the site search, and only fresh content is available on google.com.

  • Hugo
  • Systems engineering
  • scripting
  • programming (Bash/go)
  • Hugo templating

• Improve documentation build infrastructure

  LFX Mentorship · Listed in the official cohort

  @craigboxSource IssueLFX portal

  The build infrastructure for istio.io currently carries a complete archived copy of the site for each release of Istio. These archived versions should be separated to their own branch, with only the supported versions published. We should also separate out content which is not version-specific (e.g. the home page, news and blogs) so that only the latest version of this content is visible online.

  • Systems engineering
  • scripting
  • programming (Go/Bash)
  • Hugo templating

Term 1 · Mar-May · 1 project

• Improve Test Coverage for Istio Ambient Mesh

  LFX Mentorship · Listed in the official cohort

  @hzxuzhonghuSource IssueLFX portal

  Ambient mesh is now one of the biggest features in Istio, but it is in its early stage. We are in the process of improving the test coverage for Ambient Mesh in order to move it to Beta. Ztunnel works as shared data plane within a node, it subscribes to Workload and Authorization resources, both need to be well tested.

  • Go
  • Istio Test Framework

Term 3 · Sep-Nov · 2 projects

• Documentation for Ambient Mesh

  LFX Mentorship · Listed in the official cohort

  Source IssueLFX portal

  Istio is working on a new operating mode called ambient mesh. As this moves from experimental to the recommended method of operating a service mesh, we will need to revise our documentation to discuss the new model, explain the tradeoffs, and tell users how to choose.

  • Technical writing
  • Developer advocacy

• Implement performance testing

  LFX Mentorship · Listed in the official cohort

  @linsunSource IssueLFX portal

  Up until version 1.16, Istio published performance and scale testing results. These should be returned to service, and updated to support ambient mesh. Third-party benchmarking tools should be updated to support testing the performance of ambient mesh.

  • Python
  • Networking