John Howard

debug assertion failure: `assert failure: isIdleImpl()`

4

*Title*: debug assertion failure: `assert failure: isIdleImpl()` *Description*: In our CI with debug builds, we are regularly seeing this assertion failure. ``` 2022-08-04T22:11:20.554576Z critical envoy assert assert failure: isIdleImpl(). 2022-08-04T22:11:20.554714Z...

https://voyagermesh.com/docs/v12.0.0/guides/certificate/http/overview/ refereces https://raw.githubusercontent.com/appscode/voyager/v12.0.0/docs/examples/certificate/http/ing.yaml which 404s

Issues running on GKE

14

Initial install fails with ``` Warning FailedCreate 5s (x13 over 25s) daemonset-controller Error creating: insufficient quota to match these scopes: [{PriorityClass In [system-node-critical system-cluster-critical]}] ``` Move to kube-system ``` curl...

gci+goimports = duplicated imports

21

Config: ```yaml linters: disable-all: true enable: - goimports - gci fast: false linters-settings: goimports: local-prefixes: istio.io/ ``` Input: ```go package main import ( "fmt" "istio.io/istio/pkg/test/framework/resource" "os" "istio.io/istio/pkg/test/framework/resource" ) var (...

render template: show errors in output

1

Currently if a template has errors, they are silently ignored in the 'render template' command. For example: ``` [9:14:21 PM] Rendering template: result: {{ "bad" < 1}} Result: ``` It...

Mirror dockerhub kindest/node to a non rate limited registry

14

**What would you like to be added**: A mirror of kindest/node to GCR or another registry **Why is this needed**: On Nov 1, dockerhub will introduce rate limiting on pulls....

Internal panic in pointer analysis

6

``` $ chronos --file ./pilot/cmd/pilot-agent/main.go Internal panic in pointer analysis: goroutine 1 [running]: runtime/debug.Stack(0x24, 0x0, 0x0) /usr/local/go/src/runtime/debug/stack.go:24 +0x9d runtime/debug.PrintStack() /usr/local/go/src/runtime/debug/stack.go:16 +0x22 golang.org/x/tools/go/pointer.Analyze.func1(0xc03e10fad0) /usr/local/google/home/howardjohn/go/pkg/mod/golang.org/x/[email protected]/go/pointer/analysis.go:227 +0x10b panic(0x8b8b20, 0xc0b6a0a760) /usr/local/go/src/runtime/panic.go:967 +0x15d golang.org/x/tools/go/pointer.(*analysis).taggedValue(0xc07a85d6c0, 0xc0000984b7,...

Hide dns certificate management from docs

6

Aligns with https://github.com/istio/istio.io/pull/11369

Add controls around injected headers

18

This PR adds controls to which headers should be added to requests/responses. This solves (most of) https://github.com/istio/istio/issues/17635, a common feature request. A prototype is implemented in https://github.com/istio/istio/pull/37215. Open questions: *...

Add cipherSuites to DR ClientTLS settings

11

As part of https://github.com/istio/istio/issues/33210 Basically envoy made the defaults very restrictive, so if users want to to connect to legacy services the only current option is envoyfilter. I think adding...