TagWatcher requires cluster-scoped permissions for MutatingWebhooks, so
we can't support it in multi-tenant mode. On the other hand, it can't be used
in cluster-wide mode as well, because TagWatcher watches
MutatingWebhooks and relies on istio.io/rev label, which is not
unique across control planes in OSSM. Additionally, TagWatcher causes
skipping Gateways which do not have istio.io/rev label while the control
plane is a revision different than "default".

Co-authored-by: Jacek Ewertowski <[email protected]>
Signed-off-by: Yann Liu <[email protected]>

* OSSM-6079: Pass --resync flag to federation registry

Signed-off-by: Jacek Ewertowski <[email protected]>

* Remove comments for defaultRetry

Signed-off-by: Jacek Ewertowski <[email protected]>

---------

Signed-off-by: Jacek Ewertowski <[email protected]>

…eeds 60KB (#49363) (maistra#950)

* samples: do not return request body as a header to avoid 431



* Typo fixes



---------

Signed-off-by: Jacek Ewertowski <[email protected]>
Co-authored-by: Jacek Ewertowski <[email protected]>

…d GatewayAPI is disabled (maistra#977)

…ra#978)

Co-authored-by: Marko Lukša <[email protected]>
Signed-off-by: Yann Liu <[email protected]>

TestDiscovery is flaky, because weighted load balancing is not 100%
accurate and it often fails for 2 requests.

Signed-off-by: Jacek Ewertowski <[email protected]>

Custom values can be set through pilot environment variables.

---------

Co-authored-by: Jonh Wendell <[email protected]>