John Howard
John Howard
@craigbox not sure what the steering conclusion was, but I think our org just got added to the beta or it went GA - either way, we are technically able...
@richardwxn I am not suggesting the openAPI check can do everything a webhook can do. Of course the webhook can do whatever validation it wants so its much more flexible....
I am not sure how common this is that it warrants the API here. Is this an option exposed by other softwares offering authz? If it is, is this the...
We had automation in scripts/validate_crds.py, but reverted when we went from v1 -> beta CRD
checking schema is not sufficient, we are missing lots of the docs in the schema such as all our examples, etc that fall out of date.
cc @jacob-delgado @nrjpoddar @costinm @hzxuzhonghu @ramaraochavali you all probably have opinions here
cc @nrjpoddar any thoughts?
> How does it work if I have XFCC setting configured via GatewayTopology setting? I suppose you mean https://istio.io/latest/docs/ops/configuration/traffic-management/network-topologies/#configuring-x-forwarded-client-cert-headers? There is some overlap for sure but I think it's useful...
> Currently, for gateway XFCC is default ON IIRC. Are we going to preserve that behvaior? Yes. From the proto `If an empty list is provided, all are enabled.`. Today,...
Not sure we can really change the defaults due to backwards compatibility is the main concern