Retry Amplification

A misconfigured autoscaling policy watched the host service, not the Istio sidecar that saturated

GitHub's write-up puts an almost eight-hour outage on an Istio sidecar that hit its concurrency limits while the autoscaling policy watched the wrong load signal, then on four saturated HAProxy nodes and two separate retry loops.