~/talk

Deploying Service Mesh in Production

Talkat Craft Conference 2021 · 2021-06-02..06-04· [kubernetes]
slides:none on file

Concrete guidance for running a service mesh in production: use Istio with Envoy sidecars, separate Istio control plane vs data plane into distinct namespaces, run gateways separately for ingress and inter-cluster traffic, and manage certificates for mTLS via your PKI. Demos show kubectl installs, labeling namespaces for injection, a revisions-based canary upgrade (observed proxy 1.9.5 → 1.10.0), and configuring the proxy to start before the app to avoid startup failures. Focus on observability, gradual rollout, and automation around upgrades.

AI-written summary · about

  1. 0:00Start
  2. 8:40Do you have supporting infrastructure?
  3. 9:19Service mesh "lite" aka "waypoints"
  4. 10:08Start at the edge!
  5. 11:00Pick a specific use case, iterate
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.