- port: 15012
      name: https-dns # mTLS with k8s-signed cert
      protocol: TCP
    - port: 443
      name: https-webhook # validation and injection
      targetPort: 15017
      protocol: TCP
    - port: 15014
      name: http-monitoring # prometheus stats
      protocol: TCP
  selector:
    app: istiod
    {{- if ne .Values.revision "" }}
    istio.io/rev: {{ .Values.revision }}
    {{- else }}

        {{- range $key, $val := .Values.pilot.podLabels }}
        {{ $key }}: "{{ $val }}"
        {{- end }}
      annotations:
        {{- if .Values.meshConfig.enablePrometheusMerge }}
        prometheus.io/port: "15014"
        prometheus.io/scrape: "true"
        {{- end }}
        ambient.istio.io/redirection: disabled
        sidecar.istio.io/inject: "false"
        {{- if .Values.pilot.podAnnotations }}

      annotations:
        sidecar.istio.io/inject: "false"
        ambient.istio.io/redirection: disabled
        # Add Prometheus Scrape annotations
        prometheus.io/scrape: 'true'
        prometheus.io/port: "15014"
        prometheus.io/path: '/metrics'
        # Custom annotations
        {{- if .Values.cni.podAnnotations }}
{{ toYaml .Values.cni.podAnnotations | indent 8 }}
        {{- end }}
    spec:

	registerBooleanParameter(constants.SkipTLSVerify, false, "Whether to use insecure TLS in kubeconfig file")
	registerIntegerParameter(constants.MonitoringPort, 15014, "HTTP port to serve prometheus metrics")
	registerStringParameter(constants.LogUDSAddress, "/var/run/istio-cni/log.sock", "The UDS server address which CNI plugin will copy log output to")

                {
                    "endpoint_config": {
                        "@type": "type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment",
                        "cluster_name": "outbound|15014||istiod.istio-system.svc.cluster.local",
                        "endpoints": [
                            {
                                "locality": {},
                                "lb_endpoints": [

10.244.0.175:15012                               HEALTHY                  outbound|15012||istiod.istio-system.svc.cluster.local
10.244.0.175:15014                               HEALTHY                  outbound|15014||istiod.istio-system.svc.cluster.local
10.244.0.8:53                                    HEALTHY                  outbound|53||kube-dns.kube-system.svc.cluster.local

  revision: ""

  # The number of old ReplicaSets to retain in operator deployment
  deploymentHistory: 10

  # Operator resource defaults
  operator:
    monitoring:
      host: 127.0.0.1
      port: 15014
    resources:
      limits:
        cpu: 200m
        memory: 256Mi
      requests:
        cpu: 50m
        memory: 128Mi
    # Set to `type: RuntimeDefault` to use the default profile if available.

templates. enableCRDTemplates: false # revision for the operator resources revision: "" # The number of old ReplicaSets to retain in operator deployment deploymentHistory: 10 # Operator resource defaults operator: monitoring: host: 127.0.0.1 port: 15014 resources: limits: cpu: 200m memory: 256Mi requests: cpu: 50m memory: 128Mi # Set to `type: RuntimeDefault` to use the default profile if available. seccompProfile: {} # Node labels for pod assignment nodeSelector: {} # Tolerations for pod assignment...

     }
    },
    {
     "name": "0.0.0.0_15014",
     "active_state": {
      "version_info": "2023-06-20T09:07:41Z/3",
      "listener": {
       "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
       "name": "0.0.0.0_15014",
       "address": {
        "socket_address": {
         "address": "0.0.0.0",
         "port_value": 15014
        }
       },
       "filter_chains": [

                "loadBalancingWeight": 1
            }
        ],
        "policy": {
            "overprovisioningFactor": 140
        }
    },
    {
        "clusterName": "outbound|15014||istiod.istio-system.svc.cluster.local",
        "endpoints": [
            {
                "locality": {},
                "lbEndpoints": [
                    {
                        "endpoint": {