Administering Multi Cluster Service Meshes Securely

Explore secure administration of multi-cluster service meshes in this conference talk from KubeCon + CloudNativeCon North America 2021. Delve into the challenges of existing multi-cluster service mesh architectures, including the security risks of distributing Kubernetes API credentials across clusters and scalability limitations. Discover a new client-server management approach inspired by Envoy that eliminates the need to share sensitive Kubernetes credentials with remote clusters. Learn about the benefits of pull-based configuration and its implementation through Glue Mesh. Watch a demonstration of deploying meshes securely using ArgoCD, Mesh Cuddle Command, Mesh Agent Git Repository, and Mesh Console. Gain valuable insights into improving the security and scalability of multi-cluster service mesh administration.

Intro
Agenda
Single Cluster Service Mesh
Control Plane Access
MultiCluster Service Mesh
External Control Points
Push Model
Concerns
Pullbased config
Benefits
How does it work
Can it solve all of our problems
Glue Mesh
Deploying Meshes Securely
Demo
Log into ArgoCD
Mesh Cuddle Command
Mesh Agent Git Repository
Mesh Console
Wrap Up