=== T70 result log ===

$ kubectl apply -f manifest.yaml && kubectl -n istio-vt-t70 wait --for=condition=Ready pod/client pod/plaintext-prober --timeout=90s
(already applied above during setup; pods confirmed Ready 2/2 and 1/1)

$ ECHO_IP=$(kubectl -n istio-vt-t70 get pod -l app=echo -o jsonpath='{.items[0].status.podIP}')
ECHO_IP=10.255.194.83

$ kubectl -n istio-vt-t70 exec plaintext-prober -- curl -s -o /dev/null -w 'default_permissive_plaintext=%{http_code}
' --max-time 4 http://$ECHO_IP:8080/
default_permissive_plaintext=200

$ kubectl -n istio-vt-t70 exec client -c curl -- curl -s -o /dev/null -w 'mesh_client_default=%{http_code}
' http://echo.istio-vt-t70.svc.homelab.local/
mesh_client_default=200

$ kubectl apply -f - <<'YAML' (PeerAuthentication STRICT for app=echo in istio-vt-t70)
peerauthentication.security.istio.io/echo-strict-peerauth created

$ sleep 8
(slept 8s for config propagation)

$ kubectl -n istio-vt-t70 exec plaintext-prober -- curl -s -o /dev/null -w 'strict_plaintext=%{http_code}
' --max-time 4 http://$ECHO_IP:8080/ ; echo strict_plaintext_exit=$?
strict_plaintext=000
command terminated with exit code 56
strict_plaintext_exit=56

$ kubectl -n istio-vt-t70 exec client -c curl -- curl -s -o /dev/null -w 'mesh_client_strict=%{http_code}
' http://echo.istio-vt-t70.svc.homelab.local/
mesh_client_strict=200