eployments, or even for a moderately sized cluster with rapidly churning resources (for example, Spark jobs).</p><p>Both <a href=https://github.com/istio/istio/issues/26679>in the community</a> as well as for our large-scale customers at <a href=https://solo.io>Solo.io</a>, we need a way to dynamically restrict the set of namespaces that are part of the mesh so that the Istio control plane only processes resources in those namespaces. The ability to restrict the namespaces enables Istiod to watch and push f