{
               "tag": "istio.authorization.dry_run.allow_policy.name",
               "metadata": {
                "kind": {
                 "request": {}
                },
                "metadata_key": {
                 "key": "envoy.filters.http.rbac",
                 "path": [
                  {
                   "key": "istio_dry_run_allow_shadow_effective_policy_id"
                  }

  namespace: {{ .Values.global.istioNamespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
rules:
# permissions to verify the webhook is ready and rejecting
# invalid config. We use --server-dry-run so no config is persisted.
- apiGroups: ["networking.istio.io"]
  verbs: ["create"]
  resources: ["gateways"]

# For storing CA secret
- apiGroups: [""]
  resources: ["secrets"]

  namespace: {{ .Values.global.istioNamespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
rules:
# permissions to verify the webhook is ready and rejecting
# invalid config. We use --server-dry-run so no config is persisted.
- apiGroups: ["networking.istio.io"]
  verbs: ["create"]
  resources: ["gateways"]

# For storing CA secret
- apiGroups: [""]
  resources: ["secrets"]

"istio-extension-dashboard.json" echo -e "\n---\n" kubectl create configmap -n istio-system istio-grafana-dashboards \ --dry-run=client -oyaml \ --from-file=pilot-dashboard.json="${TMP}/pilot-dashboard.json" \ --from-file=istio-performance-dashboard.json="${TMP}/istio-performance-dashboard.json" echo -e "\n---\n" kubectl create configmap -n istio-system istio-services-grafana-dashboards \ --dry-run=client -oyaml \ --from-file=istio-workload-dashboard.json="${TMP}/istio-workload-dashboard.json" \ --from-f...