 for Istio, as there is typically
the Istio sidecar image alongside most pods in the cluster.</p><h2 id=mitigations>Mitigations</h2><p>Istio allows you to specify a custom docker registry which you can use to make container images be fetched from your private registry. This can be configured by passing <code>--set hub=&lt;some-custom-registry></code> at installation time.</p><p>Istio provides official mirrors to <a href=https://gcr.io/istio-release>Google Container Registry</a>. This can be configured with 