John Howard
John Howard
We are interested in a mechanism to control unbounded growth of metrics. While we generally follow best practices around limiting cardinality, for extreme long lived processes this is still problematic....
Prototyping for https://github.com/prometheus/client_rust/issues/197
*Title*: After cluster NACK, reconnection never requests CDS again *Description*: Originally reported to Istio in: https://github.com/istio/istio/issues/50670. What we are seeing is a sequence: * Initial state: proxy is connected, with...
Fixes https://github.com/istio/istio/issues/51071 Not ideal fix, longer term is in https://github.com/istio/istio/issues/48991
Currently, EVERY Istiod instance makes dry-run requests to the API server to check if the webhook is ready to move from Ignore->Failure. This PR changes it so we only do...
Fixes #51212 In draft since I will probably go and add more comments, etc Root cause is we key on `hostname+namespace` and delete instances. But we actually need to take...
https://github.com/istio/istio/blob/954dcf909cb451095fdc06102e29da959a3ac5b4/pilot/pkg/xds/endpoints/ep_filters.go#L99 filters endpoints when using HBONE. This impacts anyone using `PILOT_PREFER_SENDING_HBONE` with a multi-network GW configured, **even if the endpoint is in the same network**. We should fix this and...
https://github.com/istio/istio/blob/bc5eafed069a158f6668beda589225080b98fa5c/pkg/kube/inject/inject_test.go#L374 causes the update golden bit to not actually run, then it fails later tests requiring manual golden updates. Fairly easy to workaround but would be nice to have it...
*Title*: Passive TLS inspector *Description*: Envoy currently provides a tls_inspector. This is handy for many use cases. One use case it is _not_ great for is proxying arbitrary traffic, and...
See https://blog.howardjohn.info/posts/crd-versioning/ tl;dr: it usually doesn't matter as much as people think. Always use the latest if you are a user; use the oldest version you need to support for...