namespace: ns-override
spec:
  image:
    imageType: distroless
---
# ProxyConfig for workload-override namespace
apiVersion: networking.istio.io/v1beta1
kind: ProxyConfig
metadata:
  name: valid-example-pc
  namespace: workload-override
spec:
  selector:
    matchLabels:
      app: details
      workload: details
  image:
    imageType: distroless
---

apiVersion: release-notes/v2
kind: bug-fix
area: istioctl
releaseNotes:
- |

	rootNamespace string
	root          *v1beta1.ProxyConfig
	namespace     map[string]*v1beta1.ProxyConfig
	workload      map[string]*v1beta1.ProxyConfig
}

// ImageType returns the effective image type for the given pod.
func (e *EffectiveProxyConfigResolver) ImageType(pod *resource.Instance) string {
	variant := ""
	if e.meshConfig.GetDefaultConfig().GetImage().GetImageType() != "" {

					&v1beta1.ProxyConfig{
						Concurrency: v(3),
						Image: &v1beta1.ProxyImage{
							ImageType: "debug",
						},
					}),
			},
			proxy: newMeta("test-ns", nil, nil),
			expected: &meshconfig.ProxyConfig{
				Concurrency: v(3),
				Image: &v1beta1.ProxyImage{
					ImageType: "debug",
				},
			},
		},
		{
			name: "CR takes precedence over meshConfig.defaultConfig",

		tag = fmt.Sprintf("%v", global.GetTag().AsInterface())
	}

	imageType := global.GetVariant()
	if image != nil {
		imageType = image.ImageType
	}

	if global.GetProxy() != nil && global.GetProxy().GetImage() != "" {
		imageName = global.GetProxy().GetImage()
	}

	if it, ok := annotations[annotation.SidecarProxyImageType.Name]; ok {
		imageType = it
	}

				Tag: t,
			},
		}
	}
	pc := func(imageType string) *proxyConfig.ProxyImage {
		return &proxyConfig.ProxyImage{
			ImageType: imageType,
		}
	}

	ann := func(imageType string) map[string]string {
		if imageType == "" {
			return nil
		}
		return map[string]string{
			annotation.SidecarProxyImageType.Name: imageType,
		}
	}

	for _, tt := range []struct {

defaultConfig:
  image:

apiVersion: release-notes/v2
kind: bug-fix
area: istioctl
issue:
- 47964
releaseNotes:
- |

        - name: ISTIO_CPU_LIMIT
          valueFrom:
            resourceFieldRef:
              resource: limits.cpu
        - name: PROXY_CONFIG
          value: |
            {"image":{"imageType":"distroless"}}
        - name: ISTIO_META_POD_PORTS
          value: '[]'
        - name: ISTIO_META_APP_CONTAINERS
          value: ""
        - name: GOMEMLIMIT
          valueFrom:

    defaultConfig:
      {{- if .Values.global.meshID }}
      meshId: "{{ .Values.global.meshID }}"
      {{- end }}
      {{- with (.Values.global.proxy.variant | default .Values.global.variant) }}
      image:
        imageType: {{. | quote}}
      {{- end }}
      {{- if not (eq .Values.global.proxy.tracer "none") }}
      tracing:
      {{- if eq .Values.global.proxy.tracer "lightstep" }}
        lightstep: