Update: discussed with Environments, and made some changes, which are now reflected in the linked design doc.
Key Changes:
- Call this “Mesh ID” (not “Mesh UID”)
- Admin can specify this in values.yaml; the value is eventually exposed in the istio-sidecar-injector ConfigMap (not in MeshConfig)
- Default value when not specified by the admin will be the mesh’s Trust Domain. (Do not autogenerate a UUID.)