},
                            {
                              "tag": "istio.canonical_revision",
                              "literal": {
                                "value": "latest"
                              }
                            },
                            {
                              "tag": "istio.canonical_service",
                              "literal": {

        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:

                            },
                            {
                              "tag": "istio.canonical_revision",
                              "literal": {
                                "value": "latest"
                              }
                            },
                            {
                              "tag": "istio.canonical_service",
                              "literal": {

			if port.Protocol != "TCP" {
				protocol = fmt.Sprintf("/%s", port.Protocol)
			}
			ports = append(ports, fmt.Sprintf("%d%s (%s)", port.ContainerPort, protocol, container.Name))
		}
		// Ref: https://istio.io/latest/docs/ops/deployment/requirements/#pod-requirements
		if container.Name != "istio-proxy" && container.Name != "istio-operator" {
			if container.SecurityContext != nil && container.SecurityContext.RunAsUser != nil {

  // a list starting from the next key, but from the latest snapshot, which is inconsistent from the
  // previous list results - objects that are created, modified, or deleted after the first list request
  // will be included in the response, as long as their keys are after the "next key".
  //
  // This field is not supported when watch is true. Clients may start a watch from the last

                            },
                            {
                              "tag": "istio.canonical_revision",
                              "literal": {
                                "value": "latest"
                              }
                            },
                            {
                              "tag": "istio.canonical_service",
                              "literal": {

                                                "istio": {
                                                    "workload": "istio-ingressgateway;istio-system;istio-ingressgateway;latest;Kubernetes"
                                                }
                                            }
                                        },
                                        "load_balancing_weight": 1