I have a k8s cluster and an app app1, calling external app extApp.
I also have a Istio ServiceEntry:

I’m learning Kubernetes. My understanding is that both Istio ServiceEntry and NetworkPolicy control egress connectivity. what is the difference between them? why do we need both?

I have a small home lab for learning k8s. Its just a spare computer with proxmox. I have 1 control node and 2 worker nodes all running ubuntu 22.04 and k8s 1.28 (full k8s not one of the small footprint versions). I want to install a gateway service and I am experimenting with istio. I’m following the example here.

I would like to achieve canary deployments with Istio on Kubernetes. However, I am stuck implementing it because I would like to do the canary on a helm chart level. That means, I have a running helm release color-backend which contains a deployment color-backend that runs the Docker image color-backend:1.0 and a Service (ClusterIP) color-backend-svc with incoming port 8080 for tcp connections and outgoing port 8080 (matching the port on the deployment.