Dave Protasowski

> Wouldn't that security concern be covered by Contour's TLSCertificateDelegation I referenced in my comment above? Knative supports different ingress implementations `TLSCertificateDelegation` is only unique to Contour. > We are...

> In parallel, we have a use case where we need to use DomainMappings -- however the current implementation forces us to copy that TLS secret into the developer's namespace...

Interestingly enough I wonder if adding the app protocol broke net-gateway-api see the dependency bump here: https://github.com/knative/serving/pull/14789

Verified with the networking conformance that this should work now with our net-gateway-api integration https://github.com/knative-extensions/net-gateway-api/pull/635

/triage accepted

Hey @seongpyoHong - do you mind retesting your scenario with the latest serving release that came out two weeks ago (https://github.com/knative/serving/releases/tag/knative-v1.13.1) The PR in that release https://github.com/knative/serving/pull/14795 includes a fix...

I confirmed this is still a problem.

/triage accepted

/triage accepted I'm in favour but I'd like us to do some precursory work of evaluating `GOMEMLIMIT` (introduced in go1.19) and revisit our use of `GOGC` - https://weaviate.io/blog/gomemlimit-a-game-changer-for-high-memory-applications - https://pkg.go.dev/runtime#hdr-Environment_Variables...

> autoscaling.knative.dev/scale-to-zero-pod-retention-period: "1h" I lowered this from an hour (`1h`) to 10 miuntes (`10m`) and the pod scaled down after 10 minutes. Are you seeing something else? /triage needs-user-input