<p data-block-key="30c5k"><b>Outline for this course</b></p><p data-block-key="2ja2t"><b>As part of this exam, you should be able to perform these tasks: </b></p><ul><li data-block-key="cf25h">Understand and work with Red Hat Openshift Service Mesh Custom Resources</li><li data-block-key="1kpc9">Deploy and configure applications on Service Mesh: <ul><li data-block-key="dodjg">Install sidecar manually in pod applications</li><li data-block-key="48pkt">Automatic sidecar injection using annotations</li><li data-block-key="dnr8s">Understand the configuration of network policies (Mesh members, external services, etc.) </li></ul></li><li data-block-key="4kpub">Work with request routing and traffic management. <ul><li data-block-key="8ifv0">Be able to configure static and dynamic request routing to different versions of an application </li></ul></li><li data-block-key="5jhq9">Understand the deployment/release pattern strategies that Red Hat OpenShift Service Mesh® can help with, providing more complex operational functionality, including A/B testing and canary releases </li><li data-block-key="4jhkf">Configure and manage advanced routing techniques to control the flow and API calls between services <ul><li data-block-key="er9en">Traffic shifting migration within the mesh producing between different services A/B testing, canary rollouts, and staged rollouts with percentage-based traffic splits, and dark launches for a selective group of users </li><li data-block-key="3j16h">Take profit of the traffic mirroring capabilities to bring changes to the microservices. Be able to produce shadowing launches copying the live traffic </li></ul></li><li data-block-key="2lmt2">Send the inbound and outbound traffic from and to the mesh, managing the ingress and egress traffic control policies <ul><li data-block-key="ciuhh">Define and control gateway entry points into the mess for the incoming traffic allowing pass requests through the services </li><li data-block-key="66no1">Enable controlled access to external publicly accessible services from within the istio cluster </li></ul></li><li data-block-key="dvrm2">Be able to configure the network resilience and the fault tolerance dynamically at runtime to ensure the failing nodes and prevent localized failures from cascading <ul><li data-block-key="bnsj0">Control the waiting time for replies defining timeouts </li><li data-block-key="dqodn">Enhance service availability specifying the number of request attempts with retry strategies </li><li data-block-key="58rs8">Limit for calls within a service and prevent access to an overloaded or failing host applying a circuit breaker mechanism </li><li data-block-key="82rf0">Specify the connection and ejection pool policies configuring the load balancing destination rules </li></ul></li><li data-block-key="cnpbs">Work and configure Service Mesh policy checks <ul><li data-block-key="eu895">Define enforcement features through policies, configure local and global rate limiting, and define access quotas </li><li data-block-key="7ao06">Enable and configure the authorization for denial and allow policies applied to a workload </li></ul></li><li data-block-key="ektaa">Understand and configure the workload-to-workload communication using the implemented architecture for authentication and authorization security in Service Mesh <ul><li data-block-key="77k5v">Provide service-to-service communication with secure naming authorization </li><li data-block-key="6iccb">Tunnel the service-to-service communication using mutual TLS communication. Map the identity of the service name with secure naming </li><li data-block-key="5r6mi">Define peer authentication policies to enforce the mutual TLS mode </li><li data-block-key="cpqcb">Define the required end-user authentication policy check. Define and configure access authorization rules for service and end-user to workload communications </li></ul></li><li data-block-key="cp33u">Understand and work with the fault injection mechanisms to introduce errors and chaos testing into the system to test the failure recovery capacity of the applications <ul><li data-block-key="d712f">Inject timing failures producing delays to mimic increased network latency or overloaded services </li><li data-block-key="fkhu9">Produce crash failures with error response injections and TCP connection failures</li></ul></li></ul>