apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
  - 42249
releaseNotes:
  - |

package envoyfilter

import (
	"testing"

	core "github.com/envoyproxy/go-control-plane/envoy/config/core/v3"

	networking "istio.io/api/networking/v1alpha3"
	"istio.io/istio/pilot/pkg/model"
	"istio.io/istio/pilot/pkg/serviceregistry/memory"
	"istio.io/istio/pkg/test/util/assert"
)

func TestInsertedExtensionConfig(t *testing.T) {
	configPatches := []*networking.EnvoyFilter_EnvoyConfigObjectPatch{
		{

	"github.com/google/go-cmp/cmp"
	"google.golang.org/protobuf/testing/protocmp"

	meshconfig "istio.io/api/mesh/v1alpha1"
	model "istio.io/istio/pilot/pkg/model"
	"istio.io/istio/pilot/pkg/networking"
)

func TestGetMinTLSVersion(t *testing.T) {
	tests := []struct {
		name              string
		minTLSVer         meshconfig.MeshConfig_TLSConfig_TLSProtocol

// limitations under the License.

package xds

import (
	"context"
	"fmt"

	"google.golang.org/grpc/codes"
	"google.golang.org/grpc/status"

	"istio.io/istio/pilot/pkg/features"
	"istio.io/istio/pilot/pkg/model"
	"istio.io/istio/pkg/security"
	"istio.io/istio/pkg/spiffe"
)

// authenticate authenticates the ADS request using the configured authenticators.

	MaxConcurrentStreams = env.Register(
		"ISTIO_GPRC_MAXSTREAMS",
		100000,
		"Sets the maximum number of concurrent grpc streams.",
	).Get()

	// MaxRecvMsgSize The max receive buffer size of gRPC received channel of Pilot in bytes.
	MaxRecvMsgSize = env.Register(
		"ISTIO_GPRC_MAXRECVMSGSIZE",
		4*1024*1024,
		"Sets the max receive buffer size of gRPC stream in bytes.",
	).Get()

	PushThrottle = func() int {
		v := env.Register(

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15011"
proxy_admin_port:          15000
control_plane_auth_policy: MUTUAL_TLS

apiVersion: release-notes/v2
kind: feature
area: installation
issue:
- 49290
releaseNotes:
- |

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15010"
proxy_admin_port:          15000
control_plane_auth_policy: NONE

	framework.
		NewSuite(m).
		Label(label.CustomSetup).
		Setup(istio.Setup(&i, func(c resource.Context, cfg *istio.Config) {
			if !c.Settings().EnableDualStack {
				cfg.ControlPlaneValues = `
values:
  pilot: 
    env: 
      PILOT_JWT_ENABLE_REMOTE_JWKS: true
      ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY: false
meshConfig:
  defaultConfig:
    gatewayTopology:

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    ingressGateways:
    - enabled: true
      name: istio-ingressgateway
  values:
    pilot:
      cpu:
        targetAverageUtilization: 90
      memory: