No CVE, no off switch. What stops the Istio ambient bypass: block pods running as UID 1337, drop NET_RAW, enforce mTLS. Benjamin Koltermann's fix list.

From the Cloud Native Computing Switzerland meetup, 15 September 2026.
Full talk: youtu.be/k-DHGADtPP8

#istio #kubernetessecurity

Istio's ambient mode drops the sidecar, and with it the user ID that kept traffic in the mesh. Benjamin Koltermann shows a pod routing around it.

From the Cloud Native Computing Switzerland meetup, 15 September 2026.
Full talk: youtu.be/k-DHGADtPP8

#istio #kubernetes #cloudnative

https://lckhd.eu/J9AbQL

#Istio #ServiceMesh #Terraform #EKS

Managing observability, security, and service-to-service communication gets complex as microservices scale. Traffic routing, mTLS, and circuit breaking are important. Implementing these typically means modifying application code. Istio

AWS retira App Mesh: así migraron 40 servicios a Istio

AWS retira App Mesh: te contamos cómo resolvimos la migración AWS App Mesh a Istio en 40 servicios de producción. Descubrí los detalles acá.

#awsappmesh #istio #servicemesh #kubernetes #migracióncloud

✍️ New blog post by An Nguyen

AWS Is Retiring App Mesh. Here Is How We Moved 40 Services

#servicemesh #istio #appmesh #kubernetes

How to configure minimum TLS version, elliptic curves and PQC for Istio www.danielstechblog.io/how-to-confi... #Kubernetes #Istio