John Howard

Results 365 issues of John Howard

I ran `rm /host/opt/cni/bin/istio-cni` in a loop. If you do it slow enough, Istio will add the binary back. too fast and it never will, due to `file watcher skipping...

area/networking/cni

`failed add IP 10.42.2.30 to ipset istio-inpod-probes-v4: invalid comment` log from the CNI. ``` NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME k3d-k3s-default-agent-0 Ready 102m v1.28.8+k3s1 172.20.0.4 K3s...

kind/need more info
area/networking/cni

This PR adds new functionality to support ingress envoys sending to waypoints. This is a tricky case. Both the ingress and waypoints are applying routing and other policies. For instance,...

size/XL
release-notes-none

**If you are reporting *any* crash or *any* potential security issue, *do not* open an issue in this repo. Please report the issue via emailing [email protected] where the issue will...

bug
stale
area/http

The `estargz/testutil.go` and similar files leak the stdlib `testing` dependency into any production code that depends on these utilities. It would be ideal if the testing stuff was kept isolated...

New versions of gRPC-go are enforcing the `h2` ALPN to be presented during the TLS handshake. See https://pkg.go.dev/google.golang.org/grpc/internal/envconfig#pkg-variables `GRPC_ENFORCE_ALPN_ENABLED`. The TLS server here isn't automatically getting this set due to...

dco-signoff: yes
size/S
ok-to-test

This is a minor implementation complexity in favor of a dramatic simplification to usage of Istio authorization. Today, if a user wants to dive into zero-trust 101, they are presented...

size/S
release-notes-none

Depends on https://github.com/istio/tools/pull/3050. This PR adds support for a new cel pre-processor: https://github.com/howardjohn/celpp. This avoids the need to write incredibly verbose and error prone boilerplate to workaround limitations in the...

do-not-merge/hold
size/L

Currently, our API docs (https://istio.io/latest/docs/reference/config/networking/virtual-service/) are not well suited for human consumption IMO. The structure of the docs is based on proto. Users interacting with Istio, however, do not use...

This tracks https://github.com/kubernetes-sigs/gateway-api/pull/1757

kind/feature
priority/important-soon
lifecycle/frozen