Jesse Haka

here is the example of how it can be used currently https://gist.github.com/zetaab/31b835bfed5bdc7b2a3e29bc6557e3c1 What that does? - it can have public paths which is allowed to everyone - it have /login...

@zhaohuabing if you use api outline that is mentioned in first post, it does not support "action" mentioned in https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/rbac/v3/rbac.proto#config-rbac-v3-rbac so instead the api spec should be something like ```...

@arkodg yep, but just wanted to mention that there can be multiple types of "action". So perhaps worth of including that as well. Anyways I am really waiting for this...

@arkodg my use case is 1) I would like to have OIDC authentication (+JWT verify needed in envoy level?) 2) I would like to define that group X,Y,Z is allowed...

and actually enableVirtualHostStats does not contain metric for instance duration buckets

I do not have any exp with kms in openstack

the problem is that quite many cluster still uses default clusterName which is kubernetes. It is also difficult to migrate away from it.

Afaik its startup flag for the occm binary

I think we should add warning at least if using default value `kubernetes`

AWS uses tags in loadbalancers, so in case of openstack we could use metadata/tags to separate these with clustername.