CRE-2025-0104
Ztunnel must fetch pod workload info from Istiod over XDS before tunneling.
Ztunnel must fetch pod workload info from Istiod over XDS before tunneling.
Detects when the Istio CNI plugin fails to set up a pod's network sandbox
In Ambient mode, Istio applies a SNAT rule so that kubelet probe traffic
When Ambient mode is enabled, Ztunnel tunnels HTTP over HBONE
Detects when Istio Ambient\-mode HBONE (mTLS) traffic is blocked or dropped—
Detects when Ztunnel's DNS proxy or control\-plane component attempts to bind