.Values.global.istiod.enableAnalysis }} - apiGroups: ["config.istio.io", "security.istio.io", "networking.istio.io", "authentication.istio.io", "rbac.istio.io", "telemetry.istio.io", "extensions.istio.io"] verbs: ["update"] # TODO: should be on just */status but wildcard is not supported resources: ["*"] # Needed because status reporter sets the config map owner reference to the istiod pod - apiGroups: [""] verbs: ["update"] resources: ["pods/finalizers"] {{- end }} - apiGroups: ["networking.istio.io"] verbs: [ "get",...