A sidecar in every Pod, so traffic policy stops being every application's problem.
How this category fits together, bottom to top. Every green block is covered by a published issue — click it to go straight there.
2 issues covering 10 of the 10 topics here.
mTLS identity that turns policy into a statement about services, the AuthorizationPolicy default that flips one workload to deny, retries that multiply through a call graph, and the trace headers your application still has to forward itself.
What a sidecar mesh actually buys and what it costs, the four Envoy objects every mesh CRD renders into, what service discovery adds on top of kube-dns, and the silent L7 footgun.
The other categories sitting alongside this one.