| Service Mesh | | - Certain part of Nephio uses SRIOV and default Service Mesh might not work out of the box (Wim Henderickx )
- We cannot enable Service Mesh blindly .. We might have to selectively enable for certain workloads.
- Target Service Mesh for control plane services. Enable service mesh for "default" k8s network. VPC-RAN, VPC-Internal, VPC-Internet (data plane towards the Internet) k8s should not be used.
- Service Mesh use for Management cluster
- Communication channel between mgmt cluster and workload cluster needs to be secure. Currently mgmt cluster connects to worker cluster .. and not vice versa. Eventually we will need worker cluster to connect mgmt cluster in a secure way.
- Consider dual stack and full IPv6/IPv4
|