Virtual Machines as First Class Citizens in Service Mesh
summary
Shows how Istio adds noncontainer workloads by generating a short lived token and X509 certs, running an Envoy-based istio-agent inside a Docker container that simulates a VM on kind clusters, and enforcing mTLS between VM and pods. Demo uses Blue Mesh traffic policies to shift traffic 75/25 then 0/100 and a 50/25/25 cross-cluster split, proving canary migration and telemetry work without downtime and that VM integration can be tested without real VMs.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:18Two worlds
- 0:57Service Mesh
- 2:04Unified Communication
- 4:09CNCF Survey
- 4:58Demo Environment
- 8:40Demo Details
- 11:33Docker Image
- 12:27Deploying
- 13:55Special Tweak
- 16:55Details Service
- 17:39Traffic Policy
- 19:00Demo
related talks
34mFrom Kubelet to Istio: Kubernetes Network Security Demystified
43mContainerization in Mesos, Embracing the Standards
22mUnlock Kubernetes & Envoy: Master Your API Ecosystem!
13mKeynote: Blurring the Lines: The Continuum Between Containers and VMs
27mPanel: Tales from the Edge: Is the Edge More Important Than the Service Mesh?
35mDemystifying Zero-Trust for Cloud Native Technologies
25mUnpacking Your OTel Baggage
38mExtension and expansion of Service Mesh in edge computing scenarios