John Howard
John Howard
> Correct me if I'm wrong, but you're providing the type alongside providing the Value itself in that case, right? Which we can absolutely keep on doing. But you'd be...
What i had envisioned is a matchExpression on namespace+pod labels, just like webhooks (and a few Istio features like DiscoverySelectors, and some other things we have been discussing). i haven't...
Just a clarification from some outside context - this is for Mesh usage not Gateway I believe
> Given that by-itself IP simply isn't an identity (address != identity, for both machines and people, though it's a factor) I doubt it. My concern was more: A packet...
Are you sure this is caused by metadata_discovery and not https://github.com/istio/istio/issues/51305? I had assumed it was all issue 51305, but maybe both are factors
> Would passing the responsibility to an external service not enable arbitrarily complex access controls without the need to express them directly within the Gateway API itself? Unless the thing...