diff --git a/docs/admin/integrations/istio.md b/docs/admin/integrations/istio.md
new file mode 100644
index 0000000000000..3132052e32767
--- /dev/null
+++ b/docs/admin/integrations/istio.md
@@ -0,0 +1,35 @@
+# Integrate Coder with Istio
+
+Use Istio service mesh for your Coder workspace traffic to implement access
+controls, encrypt service-to-service communication, and gain visibility into
+your workspace network patterns. This guide walks through the required steps to
+configure the Istio service mesh for use with Coder.
+
+While Istio is platform-independent, this guide assumes you are leveraging
+Kubernetes. Ensure you have a running Kubernetes cluster with both Coder and
+Istio installed, and that you have administrative access to configure both
+systems. Once you have access to your Coder cluster, apply the following
+manifest:
+
+```yaml
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+ name: tailscale-behind-istio-ingress
+ namespace: istio-system
+spec:
+ configPatches:
+ - applyTo: NETWORK_FILTER
+ match:
+ listener:
+ filterChain:
+ filter:
+ name: envoy.filters.network.http_connection_manager
+ patch:
+ operation: MERGE
+ value:
+ typed_config:
+ "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+ upgrade_configs:
+ - upgrade_type: derp
+```
diff --git a/docs/manifest.json b/docs/manifest.json
index 14a9a7f5c6279..10ced9fe74dc1 100644
--- a/docs/manifest.json
+++ b/docs/manifest.json
@@ -696,6 +696,11 @@
"description": "Integrate Coder with JFrog Artifactory",
"path": "./admin/integrations/jfrog-artifactory.md"
},
+ {
+ "title": "Istio Integration",
+ "description": "Integrate Coder with Istio",
+ "path": "./admin/integrations/istio.md"
+ },
{
"title": "Island Secure Browser Integration",
"description": "Integrate Coder with Island's Secure Browser",
pFad - Phonifier reborn
Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies:
Alternative Proxy
pFad Proxy
pFad v3 Proxy
pFad v4 Proxy