Patterns, Anti-Patterns, and Operational Reality
How the mesh keeps identity, authorization, and data controls separate in practice
Latest articles
Layered Authorization: Network to Database
How network, request, resource, and field checks compose, with Postgres row-level security as the backstop
Signing Mesh Tokens with Vault
Why the private signing key stays in Vault, how rotation avoids 403s, and the blast radius when a component is compromised
The Identity Flow: From Gateway to Database
Tracing one request through eight checkpoints, from an Envoy header strip at the gateway to Postgres row-level security
Service Mesh Zero-Trust Architecture
A practical guide to building zero-trust applications on Istio
