Pi in the Sky: Onboarding Edge Workloads Into the Service Mesh!

on YouTube ↗26m

" summary

Demo shows a Raspberry Pi onboarded into Istio Ambient mesh using a lightweight Rust Z tunnel instead of sidecars, connecting over an East‑West gateway (ports 1512/1517) and bootstrapping with a short‑lived service account token extended to 24h. A cluster-side WorkloadEntry represents the Pi, traffic is bidirectional so a Pod can curl the Pi and the Pi can call cluster services, and an L4 authorization policy blocks by service account. Live demo includes LEDs as the actuator and some on‑stage troubleshooting.

AI-written summary · about

" chapters (14)

1. 0:00Welcome
2. 2:51Edge challenges survey
3. 5:21Service mesh overview
4. 6:06Edge computing considerations
5. 7:08Demo setup overview
6. 8:09Ambient mesh approach
7. 11:03Cluster onboarding steps
8. 14:40Raspberry Pi config with Ztunnel
9. 18:21Troubleshooting connectivity
10. 19:02Bidirectional demo
11. 21:10Cluster-to-Pi test
12. 22:54Authorization policies
13. 24:39Policy enforcement demo
14. 25:03Wrap-up and feedback