John Howard
John Howard
> Having Environment-Variable based Flags without an corresponding CLI flag is no good UX, in my opinion. So I would consider implementing the `--address-type` flag, as discussed in #2217. >...
Main motivation for getting this into `kind` and not an external tool is people use kind for documentation walkthrough, where we don't really want to impose a requirement for a...
Thanks for the report. I can reproduce and confirm its not impacting sidecars, only ztunnel
I think this is a bug in the DNS library we depend on. I opened an issue in https://github.com/hickory-dns/hickory-dns/issues/2781.
I don't see many options here aside from contributing (or waiting) for a fix upstream
> To avoid multiple istiod instances to reconcile the same objects, it would probably make sense to limit the Gateway API instance to only reconcile those Istio resources that reference...
But then mTLS between the tenants does not work, right? So it either won't work, or you want full isolation. If you want full isolation you probably don't want N...
I guess what I don't understand is why do you want to distribute the ingress-control-plane's certificate to a bunch of namespaces? The point of the namespace distribution is you have...
Oh I see, so you basically want to be able to have sidecars ~anywhere, and gateways ~anywhere, but these are independent meshes? In the past when I built similar, it...
I'm not at all opposed to a native solution here but the new MutatingAdmission work could also be an option. We can provide one. Then it uses cel to fill...