Which two types of group can be created to collect and manage objects in Istio Service Mesh? (Choose two.)

In VMware Tanzu Service Mesh, which is built on Istio, groups are a management construct used to logically collect objects for applying consistent policies. The two primary types of objects that can be organized into these groups are clusters and services. Creating groups of clusters allows for the application of policies across multiple Kubernetes clusters, while creating groups of services enables the management of related microservices as a single unit for traffic routing, resiliency, and security policy enforcement.

A. Security: Security is a type of policy (e.g., security policy, SLO policy) that is applied to a group of objects, not a type of group itself.

D. API: While services expose APIs, you group the services themselves, not the individual APIs, for policy management within Tanzu Service Mesh.

E. Node: Tanzu Service Mesh and Istio operate at a higher level of abstraction (services and workloads), abstracting away the underlying infrastructure like individual nodes.

1. VMware Tanzu Service Mesh Documentation

"Working with Groups in Tanzu Service Mesh".

Reference: The documentation explicitly states

"In Tanzu Service Mesh

you can create groups of clusters and services. You can then apply service level objectives (SLOs) and security policies to the groups." This directly confirms that 'Cluster' and 'Service' are the correct types of groups. (Located in the main body of the "Working with Groups in Tanzu Service Mesh" page).

Source: VMware Docs

VMware Tanzu Service Mesh Documentation.

2. VMware Tanzu Service Mesh Documentation

"Learn the Tanzu Service Mesh Concepts".

Reference: Under the "Groups" section

the documentation describes groups as a way to "organize your services and clusters into logical groupings." It further details how policies can be attached to these groups

reinforcing that services and clusters are the objects being grouped.

Source: VMware Docs

VMware Tanzu Service Mesh Documentation.