Keith Mattix II

`Subscription` is a reserved GraphQL type, and thus, the error you're facing is likely due to the code generator failing to process the duplication. I believe an error is desired,...

I'm running into this issue right now trying to use Google CAS as a root CA. Please add!

Where are we on this? I still am encountering the same issue

Sure thing! So essentially, OSM has two different trust models by default: 1. everything's trusted 2. nothing's trusted My proposal is to add a third mode of operation: everything in...

@shashankram no - I think the we keep things simple and not try to handle the cross-namespace case. That's a security issue waiting to happen, and at that point, users...

> So the "trust" word can be misleading here. That's fair - my original comment was concerning the "default" (i.e. out of the box) trust modes when first installing OSM;...

In a practical sense, multi-mesh is essentially just multi-trust-domain right? I have a hard time envisioning an organization running multiple trust domains in a single cluster. An empty TrafficTarget already...

Just to throw another wrinkle into this, multi-mesh is a superset of a separate, more common problem: canary upgrades between control plane mesh versions. During most implementations of this process,...

In my experience, setting up OPA is nontrivial for something that's as commoditized as JWT auth. For OPA, you've got to set up an OPA server, spend time learning Rego,...

FWIW Looks like that new release is coming soon: https://github.com/projectcontour/contour/pull/4693