Monitoring Istio configuration errors

Hi!

I’m trying to set up some monitoring for istio, I’ve already managed to get all the performance metrics from envoy and I have some alarms set up with that.

Now I’m trying to detect when there’s a configuration error in istio that’s causing the config to fail to load.
So I’m able to detect this situation by running “istioctl proxy-status” and I get this:

Is there any metric I could use to detect this same situation? If not, I guess I’m gonna have to parse the output of this command, What would be the minimum permissions required for this to execute successfully?