Faseela K
Faseela K
@shriramsharma If Solution 1 has its own complexities, and Solution 2 is anyways not simplifying any configuration, so Solution 3 is only the way forward? :D But that means re-doing...
> It seems like moving the TLS config to `PeerAuthN` was not an acceptable solution as discussed here [istio/api#2314](https://github.com/istio/api/pull/2314). As @howardjohn and @costinm mentioned, in the future we could either...
Tried testing this again with the test specified in https://github.com/envoyproxy/envoy/pull/22715 and it seems to work now. The issue can be closed. Thanks @phlax
@mattklein123 @soulxu : I am facing similar issues with in-place updates for DSCP socket_options on the listener. The same at the cluster level works fine. We have requirement to set...
> If we are going to fix this, one simple solution in my mind is to not clone socket when socket options was changed. Would be really good if we...
/retest
/test doc.test.profile_default
i think this got already covered by : https://github.com/istio/istio.io/pull/12867
> Few notes ( on both #12867 and this PR): the env variables we use are internal/experimental, and the model of adding annotations to pods and injection is not ideal....
``` faseelak@Faseelas-MBP istio.io % k get pods -n istio-system istio-egressgateway-684596759b-7czlt -o yaml | grep cert name: workload-certs name: istiod-ca-cert - mountPath: /etc/istio/egressgateway-certs name: egressgateway-certs - mountPath: /etc/istio/egressgateway-ca-certs name: egressgateway-ca-certs name:...