John Howard
John Howard
New idea - Move JWKS to ECDS - On xds request for ReqAuth X, only push something if we have fetched the JWKS - set initial fetch timeout to 15s....
@aryan16 I think we had some concerns with the above approach in followup, maybe we can copy current state here?
Not stale but not a clear path forward
Not sure a fix currently but this is still an issue
Sorry I don't fully get it. Why would you have istio-injection=true but not inject? Are multiple webhooks from different installs looking at istio-injection=true? If so, wouldn't you want an allow-list...
Yes but only k8s Gateway. Istio status has been a bit different to date
I think we have our own at https://github.com/istio/tools/tree/master/cmd/protoc-gen-docs which ultimately plumbs out to https://github.com/yuin/goldmark
/retest
Does it not work in envoy to do a normal header rewrite and use that as a key?
I mean just a standard http header rewrite in virtual service On Wed, May 8, 2024, 8:46 PM Rama Chavali ***@***.***> wrote: > Does it not work in envoy to...