Louis Ryan
Louis Ryan
This issue is pretty stale. Have you retested with 0.8 ?
@rshriram not sure if we want to do this via route-rule or whether this would move into an extension
Can you retry with 0.8. With 0.8 you will get the new Gateway resource for Ingress. I don't think that will cause AWS to autoprovision and ingree LB for you....
@ldemailly Does fortio recreate connections transparently for HTTP ?
The ingress pod looks pretty stable in the table above. Pilot had some known stability issues in 0.7 Suggest you upgrade to 0.8 and see the situation improves.
This is pretty stale. Can you retest with 0.8 ?
Hmm. It looks like when the sidecar is enabled its interfering with the ALPN handshake. @PiotrSikora I suspect this falls into the sniffing work you've been looking at.
I chatted with @costinm a bit about this. Here is what I think should happen as well as some general guidance for how to mentally model these issues going forward....
@howardjohn an interesting datapoint here is that the SPIRE folks found mapping into 'file' quite difficult to get right and be secure relative to file group permissions and abandoned the...
> I am opposed with this design, two level L7 processing not only increases the user configuration tricky, but also increase connections per path. It becomes more complex. > >...