apiVersion: release-notes/v2
kind: feature
area: traffic-management
releaseNotes:
  - |
    **Deprecated** the use of the `.global` stub domain for multi-primary
    (formerly "replicated control planes") multicluster configurations. The new
    onboarding flow uses a simpler configuration which allows services across
    the mesh to be accessed via `*.cluster.local`. There were several
    limitations with `.global`, such as poor load balancing when using

apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
  - 29364
releaseNotes:
  - |
    **Fixed** Newer control plane installations were removing permissions for `rbac.istio.io` from `istiod`, causing

    # For example: https://$remotePilotAddress:15017/inject
    injectionURL: ""

  # Revision is set as 'version' label and part of the resource names when installing multiple control planes.
  revision: ""

  sidecarInjectorWebhook:
    # This enables injection of sidecar in all namespaces,

apiVersion: release-notes/v2
kind: bug-fix
area: installation
releaseNotes:
- |

    best practices, incorporating recent updates to onboarding tooling. In
    particular, the multi-primary configuration (formerly known as
    "replicated control planes") no longer relies on manually configuring the
    `.global` stub domain, preferring instead to use `*.svc.cluster.local` for

	Resource

	EnvironmentName() string

	// Clusters in this Environment. There will always be at least one.
	Clusters() cluster.Clusters

	// AllClusters in this Environment, including external control planes.
	AllClusters() cluster.Clusters
	IsMultiCluster() bool
	IsMultiNetwork() bool

)

// BootstrapToken describes one bootstrap token, stored as a Secret in the cluster
// +k8s:deepcopy-gen=true
type BootstrapToken struct {
	// Token is used for establishing bidirectional trust between nodes and control-planes.
	// Used for joining nodes in the cluster.
	Token *BootstrapTokenString `json:"token" datapolicy:"token"`
	// Description sets a human-friendly message why this token exists and what it's used

        "lunchroom",
        "sort",
        "building",
        "fact",
        "grass",
        "planes",
        "stove",
        "pull",
        "calculator",
        "suggestion",
        "beginner",
        "plough",
        "insurance",
        "hat",
        "toys",
        "plant",
        "trail",
        "wing",
        "ring",
        "desk",
        "yak",
        "teaching",

			"comma-separated list of the form <clusterIndex>:<controlPlaneClusterIndex>, where the indexes refer to the order in which "+
			"a given cluster appears in the 'istio.test.kube.config' flag. This topology also determines where control planes should "+
			"be deployed. If not specified, the default is to deploy a control plane per cluster (i.e. `replicated control "+

	// IsPrimary returns true if this is a primary cluster, containing an instance
	// of the Istio control plane.
	IsPrimary() bool

	// IsConfig returns true if this is a config cluster, used as the source of
	// Istio config for one or more control planes.
	IsConfig() bool

	// IsRemote returns true if this is a remote cluster, which uses a control plane
	// residing in another cluster.
	IsRemote() bool