Two Outages Where We Told Envoy Something We Did Not Mean

A service mesh caused two outages, both self-inflicted and both configuration rather than software: a VirtualService applied before its DestinationRule, and a PeerAuthentication scoped to the wrong namespace.