simon-anz

I think I have the same issue. Does istioctl assume PILOT_SCOPE_GATEWAY_TO_NAMESPACE=true ? https://istio.io/latest/docs/reference/config/networking/gateway/#Gateway eg: ``` ❯ istioctl version client version: 1.15.0 control plane version: 1.14.4-asm.0 data plane version: 1.14.4-asm.0 (51...

It looks like the list of pods that the Gateway (in my example above) is checking does NOT include pods in istio-system namespace (I added some debug output) https://github.com/istio/istio/blob/master/pkg/config/analysis/analyzers/gateway/gateway.go#L71 Digging...

100% agree, and had the same experience. It seems like a strange omission to not have nice APIs for IAM, and have to use the old-style dynamic client (ugh). Things...

I'm keen for this also: using `discovery.build('cloudidentity', ...` is a bit painful