From 2ec2e8ae6d0a94b28f874c054846fe2c36d7d077 Mon Sep 17 00:00:00 2001
From: Eric Paulsen <ericpaulsen@coder.com>
Date: Wed, 11 Dec 2024 17:48:28 +0000
Subject: [PATCH] docs: add istio docs (#15733)

closes https://github.com/coder/coder/issues/11821
---
 docs/admin/integrations/istio.md | 35 ++++++++++++++++++++++++++++++++
 docs/manifest.json               |  5 +++++
 2 files changed, 40 insertions(+)
 create mode 100644 docs/admin/integrations/istio.md

diff --git a/docs/admin/integrations/istio.md b/docs/admin/integrations/istio.md
new file mode 100644
index 0000000000..3132052e32
--- /dev/null
+++ b/docs/admin/integrations/istio.md
@@ -0,0 +1,35 @@
+# Integrate Coder with Istio
+
+Use Istio service mesh for your Coder workspace traffic to implement access
+controls, encrypt service-to-service communication, and gain visibility into
+your workspace network patterns. This guide walks through the required steps to
+configure the Istio service mesh for use with Coder.
+
+While Istio is platform-independent, this guide assumes you are leveraging
+Kubernetes. Ensure you have a running Kubernetes cluster with both Coder and
+Istio installed, and that you have administrative access to configure both
+systems. Once you have access to your Coder cluster, apply the following
+manifest:
+
+```yaml
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+  name: tailscale-behind-istio-ingress
+  namespace: istio-system
+spec:
+  configPatches:
+    - applyTo: NETWORK_FILTER
+      match:
+        listener:
+          filterChain:
+            filter:
+              name: envoy.filters.network.http_connection_manager
+      patch:
+        operation: MERGE
+        value:
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+            upgrade_configs:
+              - upgrade_type: derp
+```
diff --git a/docs/manifest.json b/docs/manifest.json
index 14a9a7f5c6..10ced9fe74 100644
--- a/docs/manifest.json
+++ b/docs/manifest.json
@@ -696,6 +696,11 @@
 					"description": "Integrate Coder with JFrog Artifactory",
 					"path": "./admin/integrations/jfrog-artifactory.md"
 				},
+				{
+					"title": "Istio Integration",
+					"description": "Integrate Coder with Istio",
+					"path": "./admin/integrations/istio.md"
+				},
 				{
 					"title": "Island Secure Browser Integration",
 					"description": "Integrate Coder with Island's Secure Browser",