apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
  - 50737
releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: security

releaseNotes:
- |
  **Added** An environment variable METRICS_LOCALHOST_ACCESS_ONLY for disabling 
  metrics endpoint from outside of the pod, to allow only localhost access. User can use set this with command
  `--set values.pilot.env.METRICS_LOCALHOST_ACCESS_ONLY=true` for Control plane and  

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 50736
releaseNotes:
- |
  **Added** Allow pods to be opted out of ambient capture using the `istio.io/dataplane-mode=none` label.

apiVersion: release-notes/v2
kind: feature
area: telemetry
releaseNotes:
  - |

apiVersion: release-notes/v2
kind: feature
area: installation
releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: istioctl
releaseNotes:
 - |
  **Added** an experimental OpenShift Kubernetes platform profile to `istioctl`. To install with the OpenShift profile, use `istioctl install --set profile=openshift`.
docs:
  - '[OpenShift Platform Setup] https://istio.io/docs/setup/platform-setup/openshift/'

apiVersion: release-notes/v2
kind: feature
area: installation
issue:
- https://github.com/istio/enhancements/issues/173
releaseNotes:
- |

	// Act
	dsw.AddNode(nodeName)

	// Assert
	nodeExists := dsw.NodeExists(nodeName)
	if !nodeExists {
		t.Fatalf("Added node %q does not exist, it should.", nodeName)
	}

	// Act
	dsw.AddNode(nodeName)

	// Assert
	nodeExists = dsw.NodeExists(nodeName)
	if !nodeExists {
		t.Fatalf("Added node %q does not exist, it should.", nodeName)
	}

	volumesToAttach := dsw.GetVolumesToAttach()
	if len(volumesToAttach) != 0 {

apiVersion: release-notes/v2
kind: feature
area: istioctl
releaseNotes:
- |

apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
  - 49549
releaseNotes:
  - |