Xiaopeng Han

> Also not sure how all of this behaves with Ambient, particularly the waypoints. I think the waypoints will have the same behaviors as sidecars for this particular command.

> Noticing inconsistency in endpoint updation across proxies even from same namespace. Ips for endpoints of remote cluster are registered with pod ips instead of east-west-gw ip Happens on both...

> From Isitod log (debug) I could not find what's causing it. All I can see is an entry which says `Full push, new service my-ns/svc-name.ns.svc.cluster.local" Which version of istiod...

> @hanxiaop @nicole-lihui Might have found the problem. > > **_Gateway disconnect due to dns lookup failure._** Was analysing ADS logs (from control-plane), noticed when istiod disconnects from kube-dns (core)...

Since it's fixed and released in new versions, I'll close the issue.

See https://github.com/istio/istio/issues/44814 for our discussions about the IstioOperator resource. In the future, we may remove the need for the resource's GVK to make the configuration clearer to users.

> Btw, _**apiVersion**_ can be anything, too. However, `istioctl verify-install` will fail, because no resource **IstioOperator** is created.   @lir2002 Thanks for the info. In...

Was it already set before, and high CPU usage was observed following the upgrade?

I think there's another problem here, I'm going to take a look.

I think this is related to envoy implementations https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/jwt_authn_filter.html#copy-validated-jwt-claims-to-http-request-headers-example