·5 min read
Upgrading an Istio Service Mesh: What We Learned About Rollbacks, Auth, and Capacity
A high-severity Envoy vulnerability turned a "routine" service mesh patch into a multi-version upgrade on GKE — and into lessons on configuration drift, revision-based rollbacks, execution identity, capacity, and verifying outcomes instead of objects.