minimal.yaml" on version 1.6.11 istioctl where "minimal.yaml" is: #apiVersion: install.istio.io/v1alpha1 #kind: IstioOperator #spec: # hub: gcr.io/istio-release # revision: 1-6-11 # components: # base: # enabled: false # pilot: # enabled: true # ingressGateways: # # values: # global: # proxy: # resources: # requests: # cpu: 10m # memory: 40Mi # # addonComponents: # prometheus: # enabled: false # AddonComponents grafana component is disabled. --- # AddonComponents istiocoredns component is disabled. ---...

version 1.7.6 istioctl where "minimal.yaml" is: #apiVersion: install.istio.io/v1alpha1 #kind: IstioOperator #spec: # hub: gcr.io/istio-release # revision: 1-7-6 # components: # base: # enabled: false # pilot: # enabled: true # ingressGateways: # - name: istio-ingressgateway # enabled: false # # values: # global: # proxy: # resources: # requests: # cpu: 10m # memory: 40Mi apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.6-1-7-6 namespace: istio-system labels:...

                                            "filter_metadata": {
                                                "istio": {
                                                    "workload": "istio-ingressgateway;istio-system;istio-ingressgateway;latest;Kubernetes"
                                                }
                                            }
                                        },

		},
		{
			name: "ingress",
			node: &Proxy{
				ConfigNamespace: "other",
				Labels: map[string]string{
					"istio": "ingressgateway",
				},
				Metadata: &NodeMetadata{
					Labels: map[string]string{
						"istio": "ingressgateway",
					},
				},
			},
			listenerInfo: anyListener,
			pluginType:   WasmPluginTypeHTTP,

    to:
    - operation:
        ports: ["{{.PortDenyWorkload}}"]
`
			t.ConfigIstio().Eval(apps.Namespace.Name(), map[string]string{
				"Destination":       dst.Config().Service,
				"Source":            "istio-ingressgateway-service-account",
				"Namespace":         apps.Namespace.Name(),
				"PortAllow":         strconv.Itoa(ports.HTTP.ServicePort),
				"PortAllowWorkload": strconv.Itoa(ports.HTTP.WorkloadPort),

	kubeClient kubernetes.Interface,
	configClient istioclient.Interface,
	client kube.CLIClient,
) error {
	pods, err := kubeClient.CoreV1().Pods("").List(context.TODO(), metav1.ListOptions{
		LabelSelector: "istio=ingressgateway",
		FieldSelector: "status.phase=Running",
	})
	if err != nil {
		return multierror.Prefix(err, "Could not find ingress gateway pods")
	}
	if len(pods.Items) == 0 {

  // Controls whether any gateways are enabled.
  google.protobuf.BoolValue enabled = 2;

  // Configuration for an ingress gateway.
  IngressGatewayConfig istio_ingressgateway = 4 [json_name = "istio-ingressgateway"];

  google.protobuf.Value securityContext = 10;
}

// Global Configuration for Istio components.
message GlobalConfig {

		Metadata:        &proxyGatewayMetadata,
		ConfigNamespace: "not-default",
	}
	proxyGatewayMetadata = model.NodeMetadata{
		Namespace: "not-default",
		Labels: map[string]string{
			"istio": "ingressgateway",
		},
	}
	virtualServiceSpec = &networking.VirtualService{
		Hosts:    []string{"test.com"},
		Gateways: []string{"mesh"},
		Tcp: []*networking.TCPRoute{
			{

	// Destination rules are defined here for global purposes. We do not want these
	// catch all destination rules to be the only dest rule, when processing CDS for
	// proxies like the istio-ingressgateway or istio-egressgateway.
	// If there are no service specific dest rules, we will end up picking up the same
	// rules anyway, later in the code

	// 1. select destination rule from proxy config namespace