When an Istio Gateway is configured with protocol: TLS and tls.mode: SIMPLE (TLS termination + re-encrypt), Envoy’s tls_inspector rejects PostgreSQL client connections that use PostgreSQL’s native SSL ...