istio-pilot-agent

Key Features

Core capabilities and strengths of this container

• Dynamic service discovery and load balancing
• Traffic management and routing capabilities
• Security policy enforcement and TLS management
• Telemetry collection and monitoring integration

Common Use Cases

Typical scenarios where this container excels

• Service mesh implementation in Kubernetes clusters
• Microservices traffic management and security
• Zero-trust network architecture deployment
• Cloud-native application observability

Pull Latest Image

Download the container image from the registry

Basic Run

Run the container with basic configuration

docker run -it --name istio-pilot-agent-test clnstrt-images.cleanstart.com/$ORGANIZATION/istio-pilot-agent:latest-dev

Production Deployment

Deploy with production security settings

docker run -d --name istio-pilot-agent-prod \
  --read-only \
  --security-opt=no-new-privileges \
  --user 1000:1000 \
  clnstrt-images.cleanstart.com/$ORGANIZATION/istio-pilot-agent:latest

Volume Mount

Mount local directory for persistent data

docker run -v $(pwd)/config:/etc/istio/config clnstrt-images.cleanstart.com/$ORGANIZATION/istio-pilot-agent:latest

Port Forwarding

Run with custom port mappings

docker run -p 15000:15000 -p 15001:15001 -p 15006:15006 clnstrt-images.cleanstart.com/$ORGANIZATION/istio-pilot-agent:latest

Environment Variables

Configuration options available through environment variables

PILOT_CERT_PROVIDER

Certificate provider for pilot

istiod

ISTIO_META_CLUSTER_ID

Cluster identifier

Kubernetes

POD_NAME

Pod name for service discovery

POD_NAMESPACE

Pod namespace

Security Best Practices

Recommended security configurations and practices

• Enable mTLS for all service communications
• Implement strict network policies
• Regular security patch updates
• Use RBAC for access control
• Monitor service mesh metrics
• Implement proper certificate rotation
• Configure secure pod security contexts
• Enable audit logging

Kubernetes Security Context

Recommended security context for Kubernetes deployments

securityContext:
  runAsNonRoot: true
  runAsUser: 1337
  runAsGroup: 1337
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["ALL"]
    add: ["NET_ADMIN", "NET_RAW"]

Documentation Resources

Essential links and resources for further information

• Container Registry: https://clnstrt-images.cleanstart.com/$ORGANIZATION
• Container Documentation: https://clnstrt-images.cleanstart.com/$ORGANIZATION/istio-pilot-agent