You're reading from Microservices with Spring Boot and Spring Cloud Build resilient and scalable microservices using Spring Cloud, Istio, and Kubernetes

Product type Paperback

Published in Aug 2025

Publisher Packt

ISBN-13 9781805801276

Length 810 pages

Edition 4th Edition

Languages

Java

Tools

Spring Boot

Concepts

Microservices

Author (1):

Magnus Larsson

View More author details

Table of Contents (30) Chapters

Preface

1. Getting Started with Microservice Development Using Spring Boot

2. Introduction to Microservices FREE CHAPTER

3. Introduction to Spring Boot

4. Creating a Set of Cooperating Microservices

5. Deploying Our Microservices Using Docker

6. Adding an API Description Using OpenAPI

7. Adding Persistence

8. Developing Reactive Microservices

9. Leveraging Spring Cloud to Manage Microservices

10. Introduction to Spring Cloud

11. Adding Service Discovery Using Netflix Eureka

12. Using Spring Cloud Gateway to Hide Microservices behind an Edge Server

13. Securing Access to APIs

14. Centralized Configuration

15. Improving Resilience Using Resilience4j

16. Understanding Distributed Tracing

17. Developing Lightweight Microservices Using Kubernetes

18. Introduction to Kubernetes

19. Deploying Our Microservices to Kubernetes

20. Implementing Kubernetes Features to Simplify the System Landscape

21. Using a Service Mesh to Improve Observability and Management

22. Centralized Logging with the EFK Stack

23. Monitoring Microservices

24. Installation Instructions for macOS

25. Installation Instructions for Microsoft Windows with WSL 2 and Ubuntu

26. Native Compiled Java Microservices

27. Unlock Your Book’s Exclusive Benefits

How to unlock these benefits in three easy steps

28. Other Books You May Enjoy

29. Index

Securing a service mesh

In this section, we will learn how to use Istio to improve the security of a service mesh. We will cover the following topics:

How to protect external endpoints with HTTPS and certificates
How to require that external requests are authenticated using OAuth 2.0/OIDC access tokens
How to protect internal communication using mutual authentication (mTLS)

Let’s now understand each of these in the following sections.

Protecting external endpoints with HTTPS and certificates

In the Setting up access to Istio services and Content in the _istio_base.yaml template sections, we learned that the gateway objects use a TLS certificate stored in a Secret named hands-on-certificate for their HTTPS endpoints.

The Secret is created by the cert-manager based on the configuration in the istio-system Helm chart. The chart’s template, selfsigned-issuer.yaml, is used to define an internal self-signed CA and has the following...