#4042 is a request to skip verification by opt-auth annotation of an ingress/routegroup.
In general we want to support per route based granularity to enable/disable mTLS authentication so we can mix all kinds of workloads and have a good migration path from non mTLS to mTLS if you need.
In general we should be able to configure defaults by backend type and have it disabled by default with a global switch to enable for all or a list of backend types.
We will need to also fix #4042 in order to make this happen.
#4042 is a request to skip verification by opt-auth annotation of an ingress/routegroup.
In general we want to support per route based granularity to enable/disable mTLS authentication so we can mix all kinds of workloads and have a good migration path from non mTLS to mTLS if you need.
In general we should be able to configure defaults by backend type and have it disabled by default with a global switch to enable for all or a list of backend types.
We will need to also fix #4042 in order to make this happen.