Xiaopeng Han
Xiaopeng Han
/test unit-tests-arm64
Kindly ping @istio/wg-user-experience-maintainers, anyone has any thoughts on this feature?
Link the related issue https://github.com/istio/istio/issues/24345
So basically the idea is: when users specify the `--multi-cluster` option in `istioctl analyze`, the remote secrets that are created and applied in this cluster will also be fetched. This...
> > we can verify if policies distributed across multiple clusters are consistent > > I don't think istio-reader will have sufficient permission to do this. It will end up...
not stale, needs to find a better way to obtain the multicluster resources
So essentially, the reader service account was missing a few 'list' permissions for the analysis, primarily for deployments and webhooks. These 'watch' permissions have now been added to the reader...
Like: ``` istioctl analyze --multi-cluster Error [IST0101] (Gateway default/bookinfo-gateway) Referenced selector not found: "istio=ingressgateway" Warning [IST0158] (Namespace default) The Istio proxy images of the pods running in the namespace do...