Nick Young

The GEP was merged at Provisional, but no API PR is open, so I think that this one has missed the deadline, and we'll need to come back to it...

Cilium will implement this once I can get some developer bandwidth allocated to it.

Yes, that's correct, currently. We do have a "fallback" certificate option, but that's for use for TLS *clients* that don't supply an SNI. In the past we've generally preferred the...

Hi @kotyara85, this one will require a sysdump (as per https://docs.cilium.io/en/stable/operations/troubleshooting/#automatic-log-state-collection). That can contain sensitive information, but I'm not sure what whoever looks into this will need, sorry.

LGTM once the merge conflict is fixed.

Thanks for opening this issue @xlikewise. It looks likely that the directions haven't had you enable kube-proxy replacement correctly, as in https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/. I guess the `k3s` docs may need an...

Yes, for some reason it's commented out in the default values so it doesn't appear in that page. But that's definitely the correct setting.

Overall the updates are good in that they broadly hang together, but I'm really, really worried about the systemic complexity that these changes add. I know that the folks at...

@guicassolato and @kflynn, I found this link useful in checking out Flynn's suggested changes: https://github.com/guicassolato/gateway-api/compare/geps/713-enhancements...kflynn:gateway-api:flynn/gep-713-rework

Bringing some context here from a Slack thread (https://kubernetes.slack.com/archives/CR0H13KGA/p1745337667779919), @kflynn had a good suggestion for what we need to do in this doc for merge strategies: 1. Define names and...