Fission integration with Istio

[atiwari]

https://istio.io
IMO, this will solve much of our problem e.g. security, Ops and Assurance.
We are starting this work soon and happy to contribute.

[soamvasani]

Hi, @atiwari! Yes, we're very interested in Istio integration.

If you're interested in contributing, that's great to hear -- we should probably start by sketching out a proposal for what needs to change.

[soamvasani]

Did some quick testing with Istio. The injection of sidecars into function pods works fine, however the envoy sidecars end up being configured not to accept any incoming traffic.

I can't seem to find any istio docs about how it decides what listeners to configure in the envoy proxy sidecar. So this needs a bit more investigation.

Another issue to figure out will be how security policies work given the late binding of functions to pods, and how it affects cold-start performance.

[vishal-biyani]

Closing this for now @life1347 We should probably raise new once for additional feature requests.