Istio Day Europe 2023
2023-04-18
Amsterdam, Netherlands
[Istio Day Europe 2023, Istio Day Europe 2024, Istio Day Europe 2025]
who it's for
platform engineers, site reliability engineers, security engineers, cloud architects, Istio operators, contributors and devtools engineers, compliance engineers
topics
Istio ambient mesh; Z tunnel sidecarless data plane; mTLS with SPIFFE identities; SPIRE federated trust; Envoy as enforcement point; Gateway API Gamma alignment; egress gateway and ServiceEntry; Open Policy Agent integration; exportTo and workloadSelector filtering; per-proxy S2D filtering; Codespaces and Dev Container workflow; Argo CD + Helm + Terraform deployment
| title | author | length |
|---|---|---|
| Istio 2023 RoadMap Update | Lin Sun, Louis Ryan | 17m |
Istio announces CNCF incubation and a new ambient mesh that aims to enable cluster‑wide mTLS with a few admin steps, shipping as Alpha in 1.18, Beta in 1.19… | ||
| Red Light, Green Light: Traffic Security in the Service Mesh with Istio | Alexa Nicole Griffith, Zhenni Fu | 28m |
Bloomberg shows a working set of controls: Istio ingress gateway adds request IDs and exposes X-Envoy headers so teams trace per-request latency with no app… | ||
| Istio for Controls Compliance | Zack Butcher | 18m |
Istio implements mTLS and X.509 SPIFFE identities, uses Envoy as the enforcement point (Envoy as PEP) and can integrate with OPA for decisions, producing Envoy… | ||
| Lightning Talk: One Click Istio Development Environments | Mitch Connors | 06m |
Istio contribution setup that actually works: demo shows creating a GitHub Codespace or a local Dev Container that includes istio build tools (kind, make… | ||
| ⚡ Lightning Talk: Using Istio and SPIRE to Trust Cross-domain Traffic in Hybrid Cloud Scenarios | Matt Turner | 07m |
Istio uses SPIFFE SVIDs as x509 certs and Envoy fetches them via SDS; replacing istioD’s CA with SPIRE lets each mesh run one SPIRE server per cluster and… | ||
| Lightning Talk: Golden Rules of Resource Isolation in Istio | Zhonghu Xu | 01m |
Practical steps to cut Istio CPU, memory and bandwidth by narrowing what istiod and proxies must see are described with three concrete options and tradeoffs… | ||
| Closing Remarks, Program Committee Members | Mitch Connors, Faseela K | 02m |
Event closes after the first ever in-person Istio event, notes continued Istio coverage at KubeCon with a service mesh track opens Thursday ~4 PM and a… | ||
| Welcome + Opening Remarks, Program Committee Members | Mitch Connors, Faseela K | 14m |
Welcome and logistics note that the half day program squeezes ten proposals per slot into a tight schedule, with a full Istio kiosk at K14 and Platinum sponsor… | ||
| Is Istio Ambient Mesh Secure? | Christian Posta, John Howard | 22m |
Claim: ambient mode preserves sidecar zero trust while removing sidecars. Implementation splits data plane into a secure overlay (the Z tunnel written in Rust… | ||
| Running Istio in Production as a Small Team of Newbies | John Keates | 24m |
Small platform team (starts at three, runs at two) migrates a legacy Mesos/nginx+Lua traffic stack to Kubernetes using Istio + Envoy and an AWS ALB ingress… | ||
| nothing matches | ||