graphs with Waypoint proxy are not correctly generated

[josunect]

Traffic with istio sidecar (right) and waypoint proxy (left)

#5504 (comment)

[josunect]

With waypoint we have a couple of "issues":

• It is attached to a SA.
• There's no metrics for ratings, as the proxy created was associated to product application:
  
  But, there are associated with the bookinfo with istio-sidecar
  

Should we install a waypoint per application? Because even with the ztunnel metrics (tcp) we would be missing http metrics. L7 processing is not expected to run in the local node.

• Also, the productPage traffic application is not related with the details or reviews apps (This may be "fixed" updating the query?)

[josunect]

Following this schema:

We will deploy a GW per App.

We will get all the L7 telemetry:

No traces or outbound metrics:

kubectl apply -f - <<EOF
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: Gateway
metadata:
 name: productpage
 annotations:
   istio.io/service-account: bookinfo-reviews
spec:
 gatewayClassName: istio-mesh
 listeners:
 - name: default
   hostname: reviews
   port: 9080
   protocol: HTTP
   allowedRoutes:
     namespaces:
       from: All
EOF

kubectl apply -f - <<EOF
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: Gateway
metadata:
 name: ratings
 annotations:
   istio.io/service-account: bookinfo-ratings
spec:
 gatewayClassName: istio-mesh
 listeners:
 - name: default
   hostname: ratings
   port: 9080
   protocol: HTTP
   allowedRoutes:
     namespaces:
       from: All
EOF

kubectl apply -f - <<EOF
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: Gateway
metadata:
 name: details
 annotations:
   istio.io/service-account: bookinfo-details
spec:
 gatewayClassName: istio-mesh
 listeners:
 - name: default
   hostname: details
   port: 9080
   protocol: HTTP
   allowedRoutes:
     namespaces:
       from: All
EOF

[josunect]

• It is possible to have 1 waypoint proxy for more than one application? - Istio Ambient will create one workload per service account:
  
• It is possible that the waypoint proxy is deployed in other namespace different that the application? Applying the wp proxy in other namespace doesn't create any metric.

[josunect]

Closed by: #5978