"Izzy Saves the Birthday" - A Story-Driven Live Demo Exploring the Magic of Service Mesh
Talkat KubeCon + CloudNativeCon Europe 2025 · on Wednesday, 2025-04-02· at 15:15· Level 1 | Hall Entrance N10 | Room F·
summary
Storybook characters map to concrete service-mesh actions: a demo deploys Kubernetes with Istio ambient mode, Prometheus, SPIFFE identities, waypoint proxies and a local LLM (llama) as the external service; an applied authorization policy blocks unauthorized calls while legit demo and RAG pods keep access; HTTPRoute traffic shifting enforces 75/25 split and header-based canary and observability surfaces metrics and mTLS enforcement; claim is that ambient removes sidecars and the demo’s access control, routing and observability workflows largely work (except minor upload hiccups); 50 signed books available.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 3:15Izzy and story concept
- 5:00Izzy’s Kubernetes role
- 7:26Identity verification
- 8:29Access control in mesh
- 9:32Traffic management
- 11:19Demo setup
- 13:47Ambient mode in ISTIO
- 15:12Gateway API routing
- 16:39Testing with LLM
- 18:28ISTIO observability
- 19:36Security policies
- 22:31Image analysis demo
- 23:56Canary deployments
- 27:54Final demo dashboard
- 28:58Closing remarks
related talks
52mEmpower Your Microservices with Istio Service Mesh
01h 01mIstio Service Mesh & pragmatic microservices architecture
58mService Mesh and Sidecars with Istio and Envoy
58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...
26mManaging Kubernetes Deployment with Istio
05mLightning Talk: Istio by Example - Josef Adersberger, QAware
50mService Mesh and Sidecars with Istio and Envoy
34mService Mess to Service Mesh