istio To support Single Sign-On scenario, Istio Origin Authentication should accept a JWT Token sent in a cookie
istio Using headless service instead of endpoint in multicluster, single control-plane, multi-network configuration on EKS