As we will manage lifecycles of istiod and CNI independently in the future, it might happen that versions diverge and become incompatible (e.g. a fairly recent version of istio-cni is required to run Ambient Mesh). We need to find a way to

• find out about incompatibilities (through automated upgrade testing)
• document compatible version (compatibility matrix?)
• stop users from upgrading if their CNI is incompatible