New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

default Istio outbound traffic mode usage #87

Open

2 tasks

zivnevo opened this issue Jul 25, 2024 · 0 comments

Labels

istio

Member

zivnevo commented Jul 25, 2024

consider adding a warning when the default Istio outbound traffic mode (ALLOW_ANY) is used in the absence of sidecar resources (and it adds connectivity to dns peers for example)
Should serviceEntry (dns) peers be excluded from analysis in certain cases? e.g. kube-system pods are generally not part of the istio mesh

IBM/network-config-analyzer#476 (comment)

IBM/network-config-analyzer#476 (comment)

The text was updated successfully, but these errors were encountered:

zivnevo added the istio label

zivnevo mentioned this issue

default Istio outbound traffic mode usage IBM/network-config-analyzer#500

Closed

2 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment