ISTIO has been a good Kubernetes service mesh for a project I've been working on, and has been the hardest part to tie down though. So many obscure settings an

ISTIO has been a good Kubernetes service mesh for a project I've been working on, and has been the hardest part to tie down though. So many obscure settings and hard-to-track-down information, especially in a sea of options and possible configurations. Since our SSL is terminated in AWS our cluster was treating things as mostly "HTTP" internally and TLS-redirect HTTP->HTTPS wasn't working and other ISTIO redirects were returning HTTP when original context was HTTPS. It took lots of reading and digging through posts to find references to an "externalTrafficPolicy" setting that was crucial to fixing the problem. That was the most painful k8s/ISTIO thing that came up.