This article shows you how to deploy external or internal ingresses for Istio service mesh add-on for Azure Kubernetes Service (AKS) cluster.

Important

AKS preview features are available on a self-service, opt-in basis. Previews are provided "as is" and "as available," and they're excluded from the service-level agreements and limited warranty. AKS previews are partially covered by customer support on a best-effort basis. As such, these features aren't meant for production use. For more information, see the following support articles:

This guide assumes you followed the documentation to enable the Istio add-on on an AKS cluster, deploy a sample application and set environment variables.

Use az aks mesh enable-ingress-gateway to enable an externally accessible Istio ingress on your AKS cluster:

Use kubectl get svc to check the service mapped to the ingress gateway:

Observe from the output that the external IP address of the service is a publicly accessible one:

Applications aren't accessible from outside the cluster by default after enabling the ingress gateway. To make an application accessible, map the sample deployment's ingress to the Istio ingress gateway using the following manifest: