… The combination cert-manager + agent-level mTLS + CiliumNetworkPolicy is materially simpler than a mesh and gives us what a mesh would have given us. …
… A subproject of SIG-Network , Gateway API is the successor to Ingress, covering not just north-south traffic but also east-west and service-mesh entry points through a consistent, extensible model. …
… Platform layer Built on Kubernetes and CNCF ecosystem tools, installed and managed declaratively in separate repository or in separate directories: Argo CD — GitOps controller for continuous reconciliation Istio — service mesh for traffic control, mTLS, and service-level observability Prometheus — … …