strong>Fixed</strong> a bug that made <code>PeerAuthentication</code> too restrictive in ambient mode.</p></li><li><p><strong>Fixed</strong> an issue causing Istio CNI to stop functioning on minimal/locked down nodes (such as no <code>sh</code> binary).
The new logic runs with no external dependencies, and will attempt to continue if errors are encountered (which could be caused by things like SELinux rules).
In particular, this fixes running Istio on Bottlerocket nodes.
(<a href=https://github.com/istio/is