docs: add istio docs (#15733)

ericpaulsen · web-flow · commit 2ec2e8ae6d0a · 2024-12-11T17:48:28.000Z
closes #11821
diff --git a/docs/admin/integrations/istio.md b/docs/admin/integrations/istio.md
@@ -0,0 +1,35 @@
+# Integrate Coder with Istio
+
+Use Istio service mesh for your Coder workspace traffic to implement access
+controls, encrypt service-to-service communication, and gain visibility into
+your workspace network patterns. This guide walks through the required steps to
+configure the Istio service mesh for use with Coder.
+
+While Istio is platform-independent, this guide assumes you are leveraging
+Kubernetes. Ensure you have a running Kubernetes cluster with both Coder and
+Istio installed, and that you have administrative access to configure both
+systems. Once you have access to your Coder cluster, apply the following
+manifest:
+
+```yaml
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+  name: tailscale-behind-istio-ingress
+  namespace: istio-system
+spec:
+  configPatches:
+    - applyTo: NETWORK_FILTER
+      match:
+        listener:
+          filterChain:
+            filter:
+              name: envoy.filters.network.http_connection_manager
+      patch:
+        operation: MERGE
+        value:
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+            upgrade_configs:
+              - upgrade_type: derp
+```
diff --git a/docs/manifest.json b/docs/manifest.json
@@ -696,6 +696,11 @@
 					"description": "Integrate Coder with JFrog Artifactory",
 					"path": "./admin/integrations/jfrog-artifactory.md"
 				},
+				{
+					"title": "Istio Integration",
+					"description": "Integrate Coder with Istio",
+					"path": "./admin/integrations/istio.md"
+				},
 				{
 					"title": "Island Secure Browser Integration",
 					"description": "Integrate Coder with Island's Secure Browser",
