env:
        - name: INJECTION_WEBHOOK_CONFIG_NAME
          value: "istio-sidecar-injector-istio-system"
        - name: VALIDATION_WEBHOOK_CONFIG_NAME
          value: "istio-istio-system"
        - name: EXTERNAL_ISTIOD
          value: "true"
        - name: SHARED_MESH_CONFIG
          value: istio
    ingressGateways:
    - name: istio-ingressgateway
      enabled: false
    egressGateways:
    - name: istio-egressgateway

	ClusterName = env.Register("CLUSTER_ID", constants.DefaultClusterName,
		"Defines the cluster and service registry that this Istiod instance belongs to").Get()

	ExternalIstiod = env.Register("EXTERNAL_ISTIOD", false,
		"If this is set to true, one Istiod will control remote clusters including CA.").Get()

	EnableCAServer = env.Register("ENABLE_CA_SERVER", true,

	if i.ctx.Environment().IsMultiCluster() {
		if i.externalControlPlane || i.cfg.IstiodlessRemotes {
			// Enable namespace controller writing to remote clusters
			args.AppendSet("values.pilot.env.EXTERNAL_ISTIOD", "true")
		}

		// Set the clusterName for the local cluster.
		// This MUST match the clusterName in the remote secret for this cluster.
		clusterName := c.Name()
		if !c.IsConfig() {

 value: "true" - name: INJECTION_WEBHOOK_CONFIG_NAME value: istio-sidecar-injector-1-8-6 - name: ISTIOD_ADDR value: istiod-1-8-6.istio-system.svc:15012 - name: PILOT_ENABLE_ANALYSIS value: "false" - name: CLUSTER_ID value: Kubernetes - name: EXTERNAL_ISTIOD value: "false" - name: CENTRAL_ISTIOD value: "false" - name: PILOT_ENDPOINT_TELEMETRY_LABEL value: "true" image: gcr.io/istio-release/pilot:1.8.6 name: discovery ports: - containerPort: 8080 protocol: TCP - containerPort: 15010 protocol: TCP -...

UTBOUND value: "true" - name: PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_INBOUND value: "true" - name: ISTIOD_ADDR value: istiod-1-9-5.istio-system.svc:15012 - name: PILOT_ENABLE_ANALYSIS value: "false" - name: CLUSTER_ID value: "Kubernetes" - name: EXTERNAL_ISTIOD value: "false" resources: requests: cpu: 500m memory: 2048Mi securityContext: runAsUser: 1337 runAsGroup: 1337 runAsNonRoot: true capabilities: drop: - ALL volumeMounts: - name: config-volume mountPath: /etc/istio/config - name: istio-token mountPath:...