AAndrew Wiggey2d ago · 10 min readIstio Ambient Mesh: Definitive Guide to ZtunnelFor years, Service Mesh architecture was built on an inescapable operational tax: to secure, route, and observe microservices, you had to inject an Envoy proxy sidecar into every single Kubernetes podirexta.hashnode.dev
GGeorge Ezejiofor6d ago · 50 min readBrownfield Kubeflow on RKE2: Swapping Dex & SeaweedFS for Keycloak & Ceph RGWUpstream Kubeflow assumes a greenfield cluster and ships its own Dex, SeaweedFS and MySQL, with its own oauth2-proxy in front. My homelab already had better versions of most of those. This is the brow2Ygeorgeezejiofor.com
RRojarani DaasariSep 28 · 13 min readIstio Service Mesh: Why, When, and How It Is Used in KubernetesKubernetes makes it easier to deploy and manage containerized applications. But when an application grows from a few services to many microservices, another challenge appears: How do we manage communi1Irojadaasari.hashnode.dev
KKaustav SarkarSep 1 · 13 min readPatterns, Anti-Patterns, and Operational RealityThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous posts covered what the architecture do2blogs.kaustavsarkar.dev
KKaustav SarkarSep 1 · 12 min readLayered Authorization: Network to DatabaseThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post covered how Auth Service signs th1blogs.kaustavsarkar.dev
TThankGod Chibugwum OboboJul 18 · 11 min readImplementing mTLS in Kubernetes: How to Secure Service-to-Service CommunicationIntroduction In a microservices architecture running on Kubernetes, services communicate constantly, the orders-service calls the users-service, the payments-service calls the fraud-detection-service,actocodes.hashnode.dev
KKaustav SarkarJul 9 · 13 min readSigning Mesh Tokens with VaultThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post traced one request's identity flo1blogs.kaustavsarkar.dev
KKaustav SarkarJul 6 · 15 min readThe Identity Flow: From Gateway to DatabaseThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post laid out the five security layers22Mblogs.kaustavsarkar.dev
KKaustav SarkarJun 9 · 14 min readService Mesh Zero-Trust ArchitectureZero-trust is a property that emerges when several independent checks each verify a request on their own, without assuming the layers around them already did the work. It often gets described as a pro2blogs.kaustavsarkar.dev
NNaveenKumar VRMay 17 · 11 min readKubernetes Networking Tools: A Layer-by-Layer Guide to What Fits WhereIf you are in the DevOps world, especially the Kubernetes world chances are you have heard a lot of buzz around Kubernetes networking tools. And recently, with the announcement around NGINX Ingress declaybrainer.com
