Istio sidecar startup races, and why your pods fail only sometimes
Why Istio sidecar injection produces intermittent startup and shutdown failures, how the iptables redirect creates the race, and the configuration options that close it.
INSIGHTS
Production behavior, explained
Technical writing on how Istio, Envoy, Kubernetes, and AWS actually behave in production – the mechanism, how to diagnose it, and what to change. Every claim is referenced.
Why your Envoy circuit breaker never trips
Envoy circuit breakers are enforced per proxy instance, not per service, and Istio replaces the Envoy defaults with effectively unlimited values. Both facts explain why the breaker you configured does nothing.
Reading Kubernetes API throttling before it becomes an outage
Client-side and server-side Kubernetes API throttling produce similar symptoms and require opposite fixes. How to tell which one you are hitting on EKS, and what actually reduces the load.