#IstioCon Plain Envoy envoy -c envoy-config.yaml + Fastest - bottleneck is typing speed + No Istio dependency. Great for minimal Envoy bug reproductions + Great for rapid iteration of Envoy options - Very localhost:15012 StreamAggregatedResources + Fastest - bottleneck is typing speed + No envoy dependency + Complete control over requests - Very different from production environment - May be challenging

added to the group will directly use Istio APIs. Tetrate OSS Projects ● Wazero: the zero dependency WebAssembly runtime for Go developers ● Istio Security Scanner ● Envoy Gateway: Manages Envoy enterprise-grade Istio distro ● Func-e: Make running Envoy easy Wazero ● wazero is the only zero dependency WebAssembly runtime written in Go. ● Contribute to Go/TinyGo/Rust ● Using WasmPlugin API to extend

obvious Challenge • Dependencies require lot of time to code • Many dependencies in a test suite • Dependency maintenance is effort intensive Solution • ML-driven identification of candidate relationships

exchange a k8s token for a bootstrap certificate, then place that bootstrap certificate on the VM ■ Dependency on K8s API server ■ Requires creating an RBAC impersonation rule for each user ■ Private key

and update them. If this wasn’t the case before, Istio may not feel welcoming to users. When a dependency is not in the allowed list of a Sidecar CRD, the service mesh features will not be available for

com/istio/istio/blob/42afa0a83e529f9135bfdfd41eb0a315ac470d6e/ pkg/config/model.go Istio uses this dependency several other places, but at the time of the audit they were verified by the Istio maintainers