Istio Ambient Mesh eliminates per-pod sidecars by using a shared ztunnel DaemonSet for L4 mTLS and optional waypoint proxies for L7 features. This guide walks through a complete ambient mesh deployment on Kubernetes, including traffic policies, incremental migration from sidecar mode, and practical tips for cutting proxy resource overhead by up to 70%.