Tiger Xu / Zhonghu Xu

lgtm >At least we should bounce the idea with the K8S Services WG Is this the service-apis?

I do think most users not want to config the ciphers, secure cipher suites should satisfy most users. If this is for the very little percentage of users, how about...

/ok-to-test

All our APIs are alpha now, there isn't any harm even conflict with other CRs, is there?

I think we need to deprecate it, donot think any user is using this.

IMO, every users may need ratelimit, @keithmattix I admit different implementors can not be same, but if gateway API can not provide some typical API, why would end-user pay for...

This is [one blog](https://martensson.io/go-fsnotify-and-kubernetes-configmaps/) explaining k8s fsnotfy, looks cert-watcher can not handle secret mounted in container.

The api does not explicitly say it does not limit CR, and also it does not explicitly say it works on it. Will search the design

Unfortunately, there is even no mention of crd in the design https://docs.google.com/document/d/1S3GPCUBmTmvh09NmpuMCG3vwDTNkVeRhGT3lbLyA4qs/edit?resourcekey=0-a8iMutRwjQElYN5dlgEDdw#heading=h.h3lxcxfhqndp SO I think there is no compatibility issue, this can be treated as a feature request

https://github.com/istio/istio/issues/35092