John Howard

Add Istio 1.2 conformance report

3

**What type of PR is this?** /area conformance **What this PR does / why we need it**: Shows our support for v1.2 **Which issue(s) this PR fixes**: Fixes # **Does...

Expose CEL/OpenAPI validation rules as documentation to users

9

**What would you like to be added**: Expose validation rules to reference documentation on the website (and/or so it shows up in `kubectl explain` **Why this is needed**: Users have...

integ-ambient-calico TestServiceRestart

1

We often see a failure in this test: https://prow.istio.io/view/gs/istio-prow/logs/integ-ambient-calico_istio_postsubmit/1824130131115905024 This is a DNS failure happening when a pod is doing a lookup. Interestingly, this problem happens **without Istio at all**....

Analyzer for waypoint without anything enrolled

10

Today you can deploy a waypoint but not attach any pods/services to it. We should add an analyzer to warn when this happens

Ambient: leaked pod in snapshot, leading to ztunnel failing to startup

8

Scenario: left a cluster running for a few weeks. Not sure everything happening during this time. CNI is version 455eb1d46e. When I come back, I try to restart ztunnel. It...

1.24.1 tracking issue

5

- [ ] https://github.com/istio/istio/issues/53849 **Regression** caused by setting privileged=false on the CNI plugin. Currently exploring options for a fix. Worst case, we can revert. Users can workaround by manually setting...

1.24: Find a way to seemlessly handle Gateway API upgrade breakage

2

``` 2024-11-09T14:16:18.383340Z error watch error in cluster neo: failed to list *v1beta1.GatewayClass: json: cannot unmarshal string into Go struct field GatewayClassStatus.items.status.supportedFeatures of type v1.SupportedFeature ``` is an error reported with...

Ambient status should report about `istio.io/ingress-use-waypoint`

5

``` status: conditions: - lastTransitionTime: "2024-11-09T10:46:36Z" message: Successfully attached to waypoint podinfo/waypoint reason: WaypointAccepted status: "True" type: istio.io/WaypointBound loadBalancer: {} ``` is what we have today. We can say "Successfully...

Make csr test stricter and more correct

2

Part of https://github.com/istio/ztunnel/issues/1431 Fails without https://github.com/rustls/rcgen/pull/311

```yaml apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata: name: external-svc-https namespace: egress spec: addresses: [240.240.1.1] # Workaround auto-allocator ignoring the wildcard host endpoints: - address: httpbin.org # Always resolve this hosts: -...