Hands-on Workshop: A Guided Tour of...
summary
Hands-on workshop shows a concrete Istio Ambient Mesh setup: an istioctl install --profile ambient deploys 4-node kind cluster with a z-tunnel per node and no per-pod sidecars, enabling mTLS between z-tunnels without restarting apps. Lab proves L4 enforcement and authz at the z-tunnel, adds Waypoint proxies for L7 controls and observability, and demonstrates a 90/10 traffic split between purchase history v1 and v2. All demos complete successfully in the interactive environment.
AI-written summary · about
chapters (18)
- 0:00Welcome
- 1:10Istio Ambient Mesh overview
- 4:00Motivations for Ambient Mesh
- 10:19What is Ambient Mesh
- 13:12Workshop introduction
- 15:28Workshop environment setup
- 18:41Deploying Istio Ambient
- 20:57Deploying sample apps
- 23:59Exposing services via Gateway
- 25:03Enabling Ambient Mesh
- 28:39Verifying mTLS with Ztunnel
- 30:51Authorization policies
- 31:35L4 functionality recap
- 33:20Deploying Waypoint proxies
- 37:10Granular authorization policies
- 39:00Traffic splitting with L7
- 43:01Sidecar interoperability
- 45:10Q&A and closing
related talks
01h 06mWorkshop: Cloud Native Development for Node.js Engineers
01h 45mHands On Intro to Kubernetes & OpenShift for JS Hackers
01h 49mHands-on Intro to Kubernetes (and OpenShift) for JS Developers
23mOpenTelemetry Auto Instrumentation for Effortless Observability
26mIP Clusters - Scaling Zopim's Frontend Node Servers
20mScale production grade K8s Multi-Cluster environments using GitOps
25mRunning I/O Intensive Workloads on Kubernetes
21mInfrastructure as Code with a Node Focus