Service Mesh Platform · View 14 of 31 · 4 · Data
Decisions
- The impact check replays the last 24 hours of access logs against a proposed authorisation change and reports what it would have denied. Above 0.5% of a service's traffic the merge needs an explicit override from the security repository's owners.
- istiod sends deltas: a one-route change reaches only the proxies whose scope includes that route, and only that route. Scope comes from declared dependencies.
- A push is done when the drift exporter sees the new sha on the affected proxies. Argo CD reporting Synced means the object is in etcd, which is not the same thing.
Targets
- Intent accepted to effective on 95% of affected proxies: p95 ≤ 5 s, p99 ≤ 15 s.
Risks
- Delta xDS introduces a class of bug where a proxy silently diverges from intent. The drift exporter compares acknowledged sha per proxy, and a proxy stale for more than 60 s is forced to resubscribe.
