Overview

ztunnel (zero-trust tunnel) is the node-level proxy for Istio’s ambient mesh. It runs as a DaemonSet and provides the secure L4 overlay (mTLS, telemetry, and L4 authorization policy) for workloads enrolled in the ambient data plane, without requiring a per-pod sidecar.

This Big Bang package is a thin wrapper around the upstream ztunnel chart, repointing images at Iron Bank and exposing the upstream values under the upstream passthrough key. See the package values for the supported configuration.