ProxyDomain:                 proxy.DNSDomain,
		IstiodSAN:                   istiodSAN.Get(),
		UseExternalWorkloadSDS:      useExternalWorkloadSDSEnv,
		MetadataDiscovery:           enableWDSEnv,
		SDSFactory:                  sds,
	}
	extractXDSHeadersFromEnv(o)
	return o
}

// Simplified extraction of gRPC headers from environment.

	IstiodSAN string

	WASMOptions wasm.Options

	UseExternalWorkloadSDS bool

	// Enable metadata discovery bootstrap extension
	MetadataDiscovery bool

	SDSFactory func(options *security.Options, workloadSecretCache security.SecretManager, pkpConf *mesh.PrivateKeyProvider) SDSService
}

// NewAgent hosts the functionality for local SDS and XDS. This consists of the local SDS server and

		ProxyXDSDebugViaAgent: true,
		CARootCerts:           rootCert,
		XDSRootCerts:          rootCert,
		XdsUdsPath:            filepath.Join(d, "XDS"),
		ServiceNode:           proxy.ServiceNode(),
		SDSFactory: func(options *security.Options, workloadSecretCache security.SecretManager, pkpConf *meshconfig.PrivateKeyProvider) SDSService {
			return sds.NewServer(options, workloadSecretCache, pkpConf)
		},
	}