Krzysztof Słonka

MLBS shows `_port` in the output

3

### Kuma Version latest ### Describe the bug This example: https://kuma.io/docs/2.10.x/policies/meshloadbalancingstrategy/#route-within-the-local-zone-equally-but-specify-cross-zone-order Shows `_port`, which I don't think it should. Should we even be using `policy_yaml` / `use_meshservice=true` for this one?...

Unify "kubebuilder:validation:Enum"

3

### Description Coming from https://github.com/kumahq/kuma/pull/12895#discussion_r1965674104 We have places where we use this annotation to validate enums and places where we don't. We should unify that. Be careful about a case...

Avoid protobuf `Any` marshalling/unmarshalling in `UpdateHTTPConnectionManager`

2

### Description We would benefit from finding a way of not having to marshal/unmarshal HCM filters. It was both spotted by @lobkovilya and myself during internal perf investigation. Ilya: "commented...

Revisit using mTLS certs for Envoy Admin actions

3

### Description From our recent perf investigations we saw that `getEnvoyAdminMTLS` can take ~13% of CPU time during the time when a lot of DPPs connect. Another ~13% is mTLS...

Unify setting experimental flags (like `deltaXds`, `autoReachableServices` - via env vars - vs `sidecarContainers` via helm)

5

### Description we only have this in `kuma-cp` config - https://github.com/kumahq/kuma/blob/1d8434757c2f334e8342f7d442240fc6b6e8bff9/pkg/config/app/kuma-cp/kuma-cp.defaults.yaml#L769 but we don't have that in helm: https://github.com/kumahq/kuma/blob/8b75c48c5cb7db5ff809fdbdaea4adcf46763f49/deployments/charts/kuma/values.yaml#L888 we can either do this or by env. Are there any...

Expose control plane `pprof` endpoints on localhost by default on kubernetes

1

### Description Having pprof endpoints only available after enabling a flag is problematic with bugs that happen rarely (e.g. once a month) because there is no way to dump any...

AutoReachable services with MeshExternalService

5

### Description we scoped down https://github.com/kumahq/kuma/issues/10602 to reachable services because of https://github.com/kumahq/kuma/blob/master/docs/madr/decisions/056-meshexternalservice-and-zoneegress.md#include-default-allow-rbac-configuration-for-meshexternalservice we still need support for auto-rechable services after figuring out https://github.com/kumahq/kuma/issues/10868

Losing leader election leading to a restart that causes CI failure

7

### Description Some time ago we introduced a restart counter in our E2E tests to check if the CP does not restart (theoretically if everything is fine it shouldn't and...

### Description Once we decide we should start recommending MID / MT the demo should be updated

docs(mesh-manager): add info on how to map to konnect SPAT or KPAT

1

### Description Depends on https://github.com/kumahq/kuma/pull/13384 ### Testing instructions Preview link: ### Checklist - [ ] Review label added - [ ] [Conditional version tags](https://docs.konghq.com/contributing/conditional-rendering/#conditionally-render-content-by-version) added, if applicable.