CRE-2025-0106
Detects when the Istio CNI plugin fails to set up a pod's network sandbox
Detects when the Istio CNI plugin fails to set up a pod's network sandbox
In Ambient mode, Istio applies a SNAT rule so that kubelet probe traffic
When Ambient mode is enabled, Ztunnel tunnels HTTP over HBONE
Detects when Istio Ambient\-mode HBONE (mTLS) traffic is blocked or dropped—
Detects when Ztunnel's DNS proxy or control\-plane component attempts to bind