Best Practices on Setting up Multi Cluster Service Mesh in AWS

on YouTube ↗05m

" summary

Shows a concrete build on EKS and Istio that achieves cross-cluster mTLS and service discovery using EKS + Istio mTLS, with a centralized AWS PCA issuing mesh CAs and private keys stored in AWS PCA + Secrets Manager for Day‑0 and Day‑2 rotation. Uses cross‑account RAM/IAM to mint intermediates, exchanges remote kubeconfig secrets with long‑lived tokens for discovery, and connects clusters over Transit Gateway to an NLB east‑west gateway using NLB East‑West SNI passthrough (port 15443). Includes terraform/Backstage templates for reproducible deployment.

AI-written summary · about

" related talks

• 50mMulti-Cluster Kubernetes and Service Mesh PatternsChristian Posta · All Things Open 2020
• 27mBridging Trust Between Multi-Cluster MeshesLukonde Mwila, Ovidiu Valeanu · Istio Day North America 2023
• 25mAdministering Multi Cluster Service Meshes SecurelyEitan Yarmush, Eric Murphy · ServiceMeshCon Europe 2021
• 01h 11mMulti-cluster Service Mesh WorkshopWill McKinley · ServiceMeshCon North America 2021
• 32mMulti Cluster and Multi Mesh PatternsChristian Posta · ServiceMeshCon Europe 2020
• 41mService Mesh beyond single clustersStephan Fudeus, David Meder-Marouelli · ContainerDays 2022
• 11mLightning Talk: Multi-cluster Istio Mesh – Complex or Piece of Cake?Laszlo Bence Nagy · ServiceMeshCon Europe 2022
• 36mBuilding a Multi Cluster/Env Service Mesh at AirbnbWeibo He, Stephen Chan · KubeCon + CloudNativeCon North America 2021