Aryan Gupta
Aryan Gupta
@howardjohn I will move the client creation to the common level (probably when we create the configs) ?
> Why do we have a different k8s csr support from sidecar? We send request to istiod and istiod will do this for sidecar IMO Ztunnel has all the capabilities...
> @aryan16 How can we support VM installation using this mode? If VM is able to talk to K8s api server then no issues, if not we won't be using...
@robscott @LiorLieberman
Thanks @guicassolato for all the details and the feedback. Given that authorization and authentication within a service mesh target individual workloads, relying on workload-native APIs makes the most sense. Consequently,...
> A key mistake in Istio's API that this copies is the ability to only match an entire Gateway. This leads to people recreating route matches (often incorrectly which is...
I agree that route attachment is important, will update the spec to support that. But my point was we shouldn’t remove routing rules from authzPolicy spec for other targets as...