Default:     "",
							Type:        []string{"string"},
							Format:      "",

apiVersion: release-notes/v2
kind: feature
area: installation
issue: []
releaseNotes:
- |

					fetch := kubetest.NewSinglePodFetch(t.Clusters().Default(),
						revTagNs.Name(),
						fmt.Sprintf("app=%s", "revision-tag"))
					pods, err := fetch()
					if err != nil {
						t.Fatalf("error fetching pods: %v", err)
					}

					verifyRevision(t, istioCtl, pods[0].Name, revTagNs.Name(), tc.revision)
				})
			}
		})
}

	pods, err := kubetest.CheckPodsAreReady(fetch)
	if err != nil {
		t.Fatalf("failed to retrieve upgraded pods: %v", err)
	}
	for _, p := range pods {
		for _, c := range p.Spec.Containers {
			if strings.Contains(c.Image, fromVersion) {

	// not report a problem if *any* selecting service exposes the Gateway's port.
	servicePorts := map[uint32]bool{}
	portMapping := map[uint32]uint32{} // svc port -> svc targetPort mapping
	gwSelectorMatches := 0

	// For pods selected by gw.Selector, find Services that select them and remember those ports
	gwSelector := klabels.SelectorFromSet(gw.Selector)
	c.ForEach(gvk.Pod, func(rPod *resource.Instance) bool {

	}
	scopes.Framework.Infof("registry redirector server address: %s", c.address)

	if len(pods) == 0 {
		return nil, fmt.Errorf("no pod was selected for selector %q", podSelector)
	}

	thePod := pods[0]

	portForwarder, err := c.cluster.NewPortForwarder(thePod.Name, thePod.Namespace, "", 0, 1338)
	if err != nil {
		return nil, err
	}

                  "operator": "operatorValue",
                  "values": [
                    "valuesValue"
                  ]
                }
              ]
            }
          }
        },
        "pods": {
          "metric": {
            "name": "nameValue",
            "selector": {
              "matchLabels": {
                "matchLabelsKey": "matchLabelsValue"
              },

```console
helm install istio-cni istio/cni -n kube-system
```

Installation in `kube-system` is recommended to ensure the [`system-node-critical`](https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)
`priorityClassName` can be used. You can install in other namespace only on K8S clusters that allow
'system-node-critical' outside of kube-system.

## Configuration

                  "operator": "operatorValue",
                  "values": [
                    "valuesValue"
                  ]
                }
              ]
            }
          }
        },
        "pods": {
          "metric": {
            "name": "nameValue",
            "selector": {
              "matchLabels": {
                "matchLabelsKey": "matchLabelsValue"
              },

	// (environment variables, mount points and device files).
	Allocate(pod *v1.Pod, container *v1.Container) error

	// UpdatePluginResources updates node resources based on devices already
	// allocated to pods. The node object is provided for the device manager to
	// update the node capacity to reflect the currently available devices.
	UpdatePluginResources(node *schedulerframework.NodeInfo, attrs *lifecycle.PodAdmitAttributes) error