When you think of a service mesh, you probably think of “sidecar containers running with each pod”. The Istio team has come up with a new approach, introduced recently as an experimental preview. Google Cloud software engineers Justin Pettit and Ethan Jackson join Craig to explore ambient mesh.

Do you have something cool to share? Some questions? Let us know:

Chatter of the week

News of the week

Cloud Custodian becomes an incubating project
Anthos VM support
GKE control plane metrics
CVE-2022-3172: Aggregated API server can cause clients to be redirected
CVE-2021-25749: runAsNonRoot logic bypass for Windows containers
Akuity Platform
- Episode 172, with Jesse Suen
Weave GitOps 2022.09
Coroot Community Edition
Constellation, by Edgeless Systems
Register for Google Cloud Next
Dell and Red Hat expand strategic collaboration

Links from the interview

Nicira
Open vSwitch
Introucing Ambient Mesh
- Service mesh
First mention of Ambient in 2018
No first class support for sidecars in Kubernetes
Istio working group meeting, August 2021
- Remote proxy proposal
HBONE: HTTP/2-based overlay network environment
mTLS
HTTP Connect
GIF
MASQUE and QUIC
Get started with Ambient Mesh
Ambient Mesh Security Deep Dive
Justin Pettit and Ethan Jackson on Twitter

Ambient Mesh, with Justin Pettit and Ethan Jackson 55:48 Share

Kubernetes Podcast from Google

Shownotes Transcript

Ambient Mesh, with Justin Pettit and Ethan Jackson