ISTIO-EDI
The reference service mesh for Kubernetes — mTLS, routing, observability.
Definition
Istio injects an Envoy sidecar proxy into each pod. Provides: automatic mTLS between services (PeerAuthentication, AuthorizationPolicy), canary routing (VirtualService), retry/timeout (DestinationRule), OpenTelemetry traces. Essential for multi-tenant EDI hubs where each partner is isolated by policy.
Origin
Created by Google, IBM and Lyft in 2017. Donated to CNCF in 2022, graduated in 2023.
Example in context
An Istio VirtualService routing 10 % of traffic to the new EDIFACT parser version.