gure><p>After ambient mode is enabled and a secure overlay is created, a namespace can be configured to utilize L7 features.
This allows a namespace to implement the full set of Istio capabilities, including the <a href=/v1.25/docs/reference/config/networking/virtual-service/>Virtual Service API</a>, <a href=/v1.25/docs/reference/config/telemetry/>L7 telemetry</a>, and <a href=/v1.25/docs/reference/config/security/authorization-policy/>L7 authorization policies</a>.
Namespaces operating in this mode use one