roc

I have integrated the ztunnel into the serverless environment by modifying the ztunnel code, and successfully run ambient mode in serverless environment. Next, I will generalize my modification and submit...

> If we need to set optional packet marks for netns routing purposes, CNI/eBPF/iptables might be a better spot for this than ztunnel. @bleggett I optimized the iptables rules, and...

Another problem in serverless environment. ## Proxy outbound with DirectLocal if destination is on the same virtual node In serverless, node is virtual, pods on the same "node" do not...

In favor of this design, applicable to serverless and VM scenarios: https://docs.google.com/document/d/135gWueRb5KW2vc0RerE2vGKBoCFxbqoLVBuTGJBcxO4/edit# Related PR: https://github.com/istio/ztunnel/pull/452

一直是 string，正常情况不会报错。具体 ClusterIssuer 的 yaml 以及 webhook 的 deployment yaml 是什么？

可以看看 cert-manager 和 webhook 的 pod 运行状态和日志

cert-manager 是什么版本？

我用yaml安装的1.9.1，正常使用 

试试全部清理，重装看看

按理应该不影响，可以在其它环境也尝试下，对比差异。我这边暂时没精力深入分析