I just want mTLS on Kubernetes
An overview of options to deploy mTLS on Kubernetes
Posts
NetworkPolicy: the wrong solution to the right problem
Core problems with the API make it a challenging to use in a secure, scalable manner.
Stop Trusting Your Nodes
Zero trust architectures should not treat nodes as highly privileged components.
The Past, Present, and Future of Istio Installation
Istio's installation has a long, winding, complex history, leading to an interesting current state. In this post, I hope to explain some of the historical context of how we arrived to the current state, and where I think the project is going. This is all my personal perspective and memory of things that happened years ago, so there is likely some divergence from reality. The Past When I first started working on Istio in 2019, Istio 1.0 had just been released. The ecosystem was a pretty difference place back then. ...
Shipping Anything On Go Infrastructure
go run bash-script@latest
Service Mesh Adoption Curve
How we built a best-of-both-worlds experience with Istio ambient mode.
Everything you need to know about Istio installation
Installing Istio... hard could it be? A simple istioctl install is all you need... right?
Ambient and the SPOF Myth
Does Istio ambient introduce a SPOF? No.
Grafana Dashboard Development Workflow
How I iterate on Grafana dashboards
Podless Kubernetes
Sidecarless? Why not podless?