Jacek Ewertowski

authz: fix external authorization when `maxRequestBytes` is greater than 1MiB

3

**Please provide a description of this PR:** External authorization does not work when `envoyExtAuthz{Http,Grpc}.includeRequestBodyInCheck.maxRequestBytes` is greater than 1MiB, because HttpConnectionManager does not buffer more than 1MiB and returns `413 Payload...

xds: push CDS on AUTO_PASSTHROUGH Gateway change to fix missing mTLS clusters

1

**Please provide a description of this PR:** I noticed that auto-passthrough gateways created after enabling mTLS return 503 errors due to missing clusters. After investigating the implementation, I noticed that...

tests: add `--scheme` argument to registry-redirector to allow HTTP requests

5

**Please provide a description of this PR:** This change is needed to allow HTTP requests to kind-registry. Read #51778 and #35915 for more context.

tests: upload WASM plugins to kind-registry to avoid DNS issues in IPv6 clusters

4

**Please provide a description of this PR:** Fixes #35915. This [comment](https://github.com/istio/istio/pull/47978#issuecomment-1823155014) explains why do we have to upload WASM plugins to kind-registry before running tests. Additionally, we can't use `kind-registry:5000`...

tasks/egress: document TLS origination with BackendTLSPolicy

3

This feature will be available in Istio 1.28. - [ ] Ambient - [X] Docs - [ ] Installation - [ ] Networking - [ ] Performance and Scalability -...

Controlling default webhooks creation in `istioctl install`

6

**Background context** In multi-tenant environments, administrators may intentionally avoid setting a default revision to prevent accidental sidecar injection from the wrong control plane, such as when a namespace is missing...