Getting Started with Istio Ambient Mesh
summary
Shows Ambient Mesh running from a four-node kind cluster on Instruqt with Istio 1.18 ambient profile, claiming sidecars are removed and node-local Z tunnel and Waypoint proxies enforce L4 and L7 policy. Demonstrates: 100 synthetic requests scraped from z‑tunnel logs and metrics; an “allow nothing” L4 policy then precise identity-based allows; a Waypoint enforcing GET-only (DELETE returns 403) plus a 5s fault injection for header user Amy; and a 90/10 traffic split to purchase-history v2 (observed ~12/100). HTTPBin sidecar interop works.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 2:12Workshop overview
- 13:09Istio ambient mesh basics
- 23:06Setting up environment
- 33:28Deploying services
- 43:59Adding services to mesh
- 58:13Layer 7 policies
- 1:08:34Fault injection
- 1:17:24Ambient vs sidecar
- 1:23:27Q&A
related talks
44mA Guided Tour of ISTIO Ambient Mesh
48mIstio Ambient Mesh deep dive
30mFrom Sidecar to Ambient: Understanding the Evolution of the Service Mesh with Istio
42mThe Current and Future State of Istio
23mIntroduction to Ambient Mesh
11mIstio Ambient Mesh: Sidecar vs Sidecar-less, Explained Simply
40mIstio Today and Tomorrow: Sidecars and Beyond
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars