The presentation discusses the installation and use of Emissary, a service mesh for Kubernetes, and its ability to achieve zero trust networking.
- Emissary is a service mesh for Kubernetes that can achieve zero trust networking
- Emissary uses envoy for data wrangling and can consume ebpf modules for networking efficiency
- Emissary can generate unique certificates for each connection and recommends using cert manager for certificate rotation
- Emissary 2.11 introduced the ability to use policy for zero trust networking and 2.12 will have a more granular and easier to use policy system
- Installation of Emissary involves adding the helm repo, installing the Emissary CRDs, and using helm to install Emissary into a namespace