Skip to content

Commit dffec81

Browse files
committed
Mention native side-cars
Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>
1 parent 84074c3 commit dffec81

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

_posts/2021-05-19-istio-functions.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,8 @@ dark_background: true
1616

1717
Learn how to enable Istio for your OpenFaaS functions to take advantage of Mutual TLS and more
1818

19+
> Last updated: Tested and updated on 26 March 2025
20+
1921
## Introduction
2022

2123
Service meshes have become popular add-ons for Kubernetes, so much so that they have their [own ServiceMeshCon days](https://events.linuxfoundation.org/servicemeshcon/) at [KubeCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/), the official Kubernetes conference.
@@ -35,7 +37,7 @@ The value for users is:
3537
* Encrypting traffic between all OpenFaaS components and functions for "zero trust"
3638
* Providing advanced networking like retries, and weighting for canaries and gradual rollouts of new functions
3739

38-
Thank you to [John Howard](https://github.com/howardjohn) from Google for helping us with this work and to [Lucas Roesler](https://github.com/lucasroesler) for reviewing and testing the work.
40+
Thank you to [John Howard](https://github.com/howardjohn) from the Istio team for helping us with reviewing this blog post.
3941

4042
In this blog post we'll give you a quick introduction so that you can start integrating Istio with OpenFaaS. We'll then go on to show you how to measure the resource consumption of the cluster, and how to create a TLS certificate for the Istio Gateway.
4143

@@ -73,6 +75,10 @@ istioctl install \
7375
--set meshConfig.defaultConfig.holdApplicationUntilProxyStarts=true
7476
```
7577

78+
The [holdApplicationUntilProxyStarts](https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#ProxyConfig-hold_application_until_proxy_starts) option is important to counter delays and race conditions from latency that Istio introduces from injecting its sidecar into each meshed container.
79+
80+
If you are able to use [Istio's native sidecars](https://istio.io/latest/blog/2023/native-sidecars/), that can be use as an alternative, but requires Kubernetes 1.28 or higher.
81+
7682
See other options for: [istioctl](https://istio.io/latest/docs/setup/install/istioctl/).
7783

7884
### Install OpenFaaS

0 commit comments

Comments
 (0)