James Peach

Now sure what a "bulkhead" policy means, can we rephrase the title?

IMHO, not all imports, just common or conventional ones. I don't think that we should go down the path of always requiring import aliases everywhere :)

> In this > > https://github.com/kumahq/kuma/blob/6c6224880eefddfe01533a0ebba9940b1eceead2/pkg/xds/generator/protocol.go#L23-L54 ```Go // a common protocol between HTTP and HTTP2 is HTTP2, ... // a common protocol between HTTP and HTTP2 is HTTP. ``` Only...

Do DNS records for VIPs have a TTL? Maybe the grace period should be some multiple of the TTL?

IIRC, it's about extracting a utility function that posts a JON object. There's 3 or 4 paces that do this. https://github.com/kumahq/kuma/blob/e5bbd7b4f3e18c682e19503a97296adfe59b5e7e/pkg/plugins/authn/api-server/tokens/ws/client/client.go#L39-L56

An inbound gets exactly 1 best-match TrafficPermission policy applied to it. So you can't apply both of these policies to same destination service at once (since it's inbound can only...

> This does work but the user that hit did point out that: > > a) Creation of a new permission broke something existing > b) It looked like it...

/cc @lobkovilya

xref https://github.com/kumahq/kuma/issues/2004

> But I'm looking forward to whether we can make Snapshot an interface in upstream go-control-plane See https://github.com/envoyproxy/go-control-plane/pull/491.