John Howard
John Howard
> If there is any way to pass through caller certificate through Istio-IngressGateway ? It is/can be passed in XFCC, but you cannot assert policies against this > Is it...
Correct, sourcePrincipals is the source's principal. The source is the ingressgw. There is no "source's Source Principal" assertion
Almost all the CPU is spent on an off-by-default experimental feature PILOT_ENABLE_ANALYSIS. If you turn that off, presumably the CPU will go down quite a bit.
The CEL validation probably doesn't fully validate as deeply as envoy does? Given the error seems to be about treating a scalar as a map or similar, Istio doesn't have...
/test all
/test lint_istio
/test unit-tests
/test all
/test all
/test all