func (*FieldAnalyzer) analyzeSidecar(r *resource.Instance, ctx analysis.Context) {
	sc := r.Message.(*v1alpha3.Sidecar)

	if sc.OutboundTrafficPolicy != nil {
		if sc.OutboundTrafficPolicy.EgressProxy != nil {
			ctx.Report(gvk.VirtualService,
				msg.NewDeprecated(r, ignoredMessage("OutboundTrafficPolicy.EgressProxy")))
		}
	}
}

func (*FieldAnalyzer) analyzeVirtualService(r *resource.Instance, ctx analysis.Context) {

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
- 39794
releaseNotes:
- |

		},
		Spec: &networking.Sidecar{
			OutboundTrafficPolicy: &networking.OutboundTrafficPolicy{
				Mode: networking.OutboundTrafficPolicy_REGISTRY_ONLY,
			},
		},
	}
	configAllowAny := &config.Config{
		Meta: config.Meta{
			Name:      "foo",
			Namespace: "not-default",
		},
		Spec: &networking.Sidecar{
			OutboundTrafficPolicy: &networking.OutboundTrafficPolicy{

      drainDuration: 12s
      tracing:
        zipkin:
          address: zipkin.istio-system:9411
    defaultProviders:
      metrics:
      - prometheus
    enablePrometheusMerge: true
    outboundTrafficPolicy:
      mode: REGISTRY_ONLY
    rootNamespace: istio-control
    trustDomain: cluster.local
  meshNetworks: 'networks: {}'
kind: ConfigMap
metadata:
  labels:

"timeoutSeconds"
"periodSeconds"
"successThreshold"
"failureThreshold"
"tcpSocket"
"httpGet"
"exec"
"scheme"
"command"
"annotations"
"endpoints"
"location"
"ingress"
"outgress"
"outboundTrafficPolicy"
"captureMode"
"defaultEndpoint"
"gateways"
"delegate"
"redirect"
"rewrite"
"timeout"
"retries"
"fault"
"mirror"
"mirrorPercentage"
"corsPolicy"
"headers"

	out.selectDestinationRules(ps, configNamespace)

	if sidecar.OutboundTrafficPolicy == nil {
		if ps.Mesh.OutboundTrafficPolicy != nil {
			out.OutboundTrafficPolicy = &networking.OutboundTrafficPolicy{
				Mode: networking.OutboundTrafficPolicy_Mode(ps.Mesh.OutboundTrafficPolicy.Mode),
			}
		}
	} else {
		out.OutboundTrafficPolicy = sidecar.OutboundTrafficPolicy
	}

	return out
}

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: empty
  hub: docker.io/istio
  tag: 1.1.4
  meshConfig:
    enablePrometheusMerge: true
    rootNamespace: istio-control
    outboundTrafficPolicy:
      mode: REGISTRY_ONLY
    defaultConfig:
      discoveryAddress: my-discovery:123
      drainDuration: 12s
      controlPlaneAuthPolicy: NONE
    accessLogFormat: |
      {
        "key": "val"
      }

kind: Sidecar
metadata:
  name: no-selector
  namespace: default
spec:
  ingress:
  - port:
      number: 9080
    defaultEndpoint: unix:///var/run/some.sock
  egress:
  - hosts:
    - "./*"
  outboundTrafficPolicy:
    mode: ALLOW_ANY
    egressProxy:
      host: example
      port:
        number: 9080
---
apiVersion: config.istio.io/v1alpha2
kind: QuotaSpec
metadata:
  name: request-count

    * https://istio.io/latest/docs/ops/best-practices/security/

For further documentation see https://istio.io website

{{-
  $deps := dict
    "global.outboundTrafficPolicy" "meshConfig.outboundTrafficPolicy"
    "global.certificates" "meshConfig.certificates"
    "global.localityLbSetting" "meshConfig.localityLbSetting"
    "global.policyCheckFailOpen" "meshConfig.policyCheckFailOpen"

	var errs util.Errors
	messages := []string{}
	warningSettings := []deprecatedSettings{
		{"Values.global.certificates", "meshConfig.certificates", nil},
		{"Values.global.outboundTrafficPolicy", "meshConfig.outboundTrafficPolicy", nil},
		{"Values.global.localityLbSetting", "meshConfig.localityLbSetting", nil},
		{"Values.global.policyCheckFailOpen", "meshConfig.policyCheckFailOpen", false},