John Howard <******@****.***> 1682617769 -0700

}

var _ model.XdsResourceGenerator = &LdsGenerator{}

// Map of all configs that do not impact LDS
var skippedLdsConfigs = map[model.NodeType]sets.Set[kind.Kind]{
	model.Router: sets.New(
		// for autopassthrough gateways, we build filterchains per-dr subset
		kind.WorkloadGroup,
		kind.WorkloadEntry,
		kind.Secret,
		kind.ProxyConfig,
		kind.DNSName,
	),
	model.SidecarProxy: sets.New(
		kind.Gateway,

upgradeNotes:
- title: "`AUTO_PASSTHROUGH` Gateway mode"
  content: |
    Previously, gateways were configured with multiple Envoy `cluster` configurations for each Service in the cluster, even those

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
  - 34944

releaseNotes:
- |

metadata:
  name: cross-network-gateway
spec:
  selector:
    istio: eastwestgateway
  servers:
    - port:
        number: 15443
        name: tls
        protocol: TLS
      tls:
        mode: AUTO_PASSTHROUGH
      hosts:

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
- 33127
releaseNotes:
- |

  namespace: istio-system
spec:
  servers:
  - hosts:
    - istio-system/*.local
    port:
      name: default
      number: 35443
      protocol: TLS
    tls:
      mode: AUTO_PASSTHROUGH
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/eastwestgateway-grpc.istio-system
    internal.istio.io/route-semantics: gateway

		UsePost:  tunnelSettings.Protocol == "POST",
	}
}

// Skip has no effect; its only purpose is to avoid passing nil values for ApplyFunc arguments
// when it is not desired to apply `tunneling_config` to a listener, e.g. AUTO_PASSTHROUGH

  namespace: istio-system
spec:
  servers:
  - hosts:
    - istio-system/*.local
    port:
      name: default
      number: 35443
      protocol: TLS
    tls:
      mode: AUTO_PASSTHROUGH
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/eastwestgateway-grpc.istio-system
    internal.istio.io/route-semantics: gateway

  namespace: istio-system
spec:
  servers:
  - hosts:
    - istio-system/*.local
    port:
      name: default
      number: 15443
      protocol: TLS
    tls:
      mode: AUTO_PASSTHROUGH
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/eastwestgateway-grpc.istio-system
    internal.istio.io/route-semantics: gateway