Daniel Tomcej

Although this PR creates a new service that fronts Traefik, it doesn't provide any differentiator to Traefik that the request came through the internal service instead. If this is just...

We could also look at boulder/pebble if we are only wanting to manage TLS certs.

In the past there was a poor mans "audit" that ran on a timer to verify all services were matched up, and that if there was a missing shadow service,...

oooo That is a neat idea. Letting kubernetes handle it automatically? I like it.

@jspdown I think that if we use references, we lose a bit of control over the deletion events. We have to just "trust" that things will be handled properly by...

This would involve creating a service in the user's namespace that would forward to maesh pods. This would also have to have the same ports as the maesh shadow service.

The custom separator was required due to regex parsing of the DNS request. `test-service.test-namespace` would get parsed as `test-service-test.namespace` when we use the `{name}-{namespace}-maesh` format. The issue here is that...

We may also want to have a `spinach.yaml` like this: ```yaml # Severities: Ok: 0, Info: 1, Warn: 2, Error: 3 popeye: codes: 301: severity: 1 # Set severity level...

@mmatur Do we have popeye tapped into our CI process at all? or is this still a manual run?

I'm curious why you would choose to use gRPC-Web as a protocol for inter-service communication. It seems like gRPC-Web is designed to solve some issues that browsers face, and provide...