rarely obvious Challenge • Dependencies require lot of time to code • Many dependencies in a test suite • Dependency maintenance is effort intensive Solution • ML-driven identification of candidate relationships “orderValue”: “28.00” } Reference data Problem • Not all differences are errors Challenge • Assertion creation/maintenance is effort intensive Solution • Comprehensive comparison of results • ML-driven identification & Integration Testing Improve productivity of each of your developers 10x API test and mock creation speed | CONFIDENTIAL 20 DEMO | CONFIDENTIAL Download MeshD and use http://www.meshdynamics

酷家乐 Istio 与 Knative 踩坑实录 付铖 (花名:橙子) 酷家乐 技术专家1/25 从3D Mesh 到Service Mesh2/25 /01 /02 /03 实践进展 Istio的价值和问题 Knative的实践和瓶颈3/25 分享主题：字号 实践进展 /01 酷家乐在服务网格和FAAS方向上的实践进展汇总4/25 生产环境Istio稳定运行 酷家乐于2018年8月29日在国际站生产环

Review the fixes for the issues found in an audit from 2020. 4. Review and improve Istio's fuzzing suite. 5. Perform a SLSA review of Istio. The audit was started with a kickoff meeting, and following that Security Audit, 2023 Fuzzing The second goal of the audit was to assess and improve the fuzz test suite of Istio. During the initial assessment, the Ada Logics auditing team reviewed the existing fuzzing avoid disruption. ● Istio does not run the fuzzers in its CI pipeline. Istio has had its fuzzing suite for around a year and has previously found high severity security issues such as CVE-2022-23635 along

Automation ● Automate the Istio setup during Kubernetes cluster creation ● Automated endpoint config creation on new micro-service creation or updation ● Templatise the Kubernetes deployment including

such that prioritization of hostname matching is based on the creation time of hostnames used by Gateway resources instead of the creation time of the Gateway resources themselves. As it is unclear if using vanilla Kubernetes APIs alone, without some additional caching mechanism to track Gateway creation, it may be worthwhile to create an Istio Hostname resource that can be referenced by Gateways, which

#IstioCon Please Build System ● https://github.com/thought-machine/please ● Uses BUILD and allows for creation of miscellaneous rules Misc please rule for autogeneration K8s Greeter service example #IstioCon

protocols other than just HTTP and gRPC. You can think of Aeraki as the “Controller" to automate the creation of envoy configuration for layer-7 protocols #IstioCon Aeraki: Manage any layer-7 traffic in an

container is not ready? Stabilizing Istio ● 2 cases where it happens frequently: ○ During pod creation ○ During pod deletion ● To prevent it, we need to make sure that: 1. Envoy is started before