- issuer: testing@secure.istio.io jwksUri: "https://raw.githubusercontent.com/istio/istio/re lease-1.8/security/tools/jwt/samples/jwks.json" apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy

Debugf("wasm module download request failed: %v", err) if ctx.Err() != nil { // If there is context timeout, exit this loop. return nil, fmt.Errorf("wasm module download failed after %v attempts, last error: Config{InsecureSkipVerify: true} return &HTTPFetcher{ client: &http.Client{ Timeout: requestTimeout, }, insecureClient: &http.Client{ Timeout: requestTimeout, Transport: transport, }, initialBackoff: time

failures inside the mesh ● Everyone says to fail fast and retry quickly, but... ● How fast to timeout? ○ If it’s too early then failed the request for no reason. ○ If it’s too late then the calling

traffic to the service as if it was a service in your mesh ■ Traffic redirect and forward ■ Retry, timeout, fault injection, mtls policies ■ VM service, multicluster Istio mesh support ● Service + Endpoints