John Howard
John Howard
Please run the command I sent 🙂
@bleggett tests are passing now
I am not 100% sure but I think GCP does this by `--enable-aggregator-routing` not Konnectivity (which is used for other proxying, but not webhooks). The same might not work on...
> Is there a situation that the double TLS would be desirable? If not, does it make sense to change the behavior so pass-through overrides gateway TLS? Yes, if the...
it already knows see the "supports tunnel". It's in eds though. It's only a problem when you turn off auto-mtls
ISTIO_GPRC_MAXRECVMSGSIZE needs to be set on the proxy pods in this case not Istiod. Did you set it there?
It's not so much about the labels but the namespace. They namespace *is* authenticated and not blindly trusted On Tue, Nov 5, 2024, 6:22 PM MaYuanyuan ***@***.***> wrote: > ***@***.****...
I likely won't be able to review this this week due to kubecon but put it on the top of my TODO list when I get back. Given the security...
Overall looks good! just a few comments but I think the general strategy makes sense cc @ilrudie
Every critical fix has been merged!