// For getting the certificate, using same code as SDS server.
	// Either the JWTPath or the certs must be present.
	JWTPath string

	// XDSSAN is the expected SAN of the XDS server. If not set, the ProxyConfig.DiscoveryAddress is used.
	XDSSAN string

	// XDSRootCAFile explicitly set the root CA to be used for the XDS connection.
	// Mirrors Envoy file.
	XDSRootCAFile string

install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" release: istio data: # Configuration file for the mesh networks to be used by the Split Horizon EDS. meshNetworks: |- networks: {} mesh: |- defaultConfig: discoveryAddress: istiod-1-8-6.istio-system.svc:15012 proxyMetadata: DNS_AGENT: "" tracing: zipkin: address: zipkin.istio-system:9411 enablePrometheusMerg: true rootNamespace: istio-system trustDomain: cluster.local --- apiVersion: v1 kind: ConfigMap metadata:...

install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" release: istio data: # Configuration file for the mesh networks to be used by the Split Horizon EDS. meshNetworks: |- networks: {} mesh: |- defaultConfig: discoveryAddress: istiod-1-10-0.istio-system.svc:15012 proxyMetadata: {} tracing: zipkin: address: zipkin.istio-system:9411 enablePrometheusMerg: true rootNamespace: istio-system trustDomain: cluster.local --- apiVersion: v1 kind: ConfigMap metadata: name: i...

install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" release: istio data: # Configuration file for the mesh networks to be used by the Split Horizon EDS. meshNetworks: |- networks: {} mesh: |- defaultConfig: discoveryAddress: istiod-1-9-5.istio-system.svc:15012 proxyMetadata: {} tracing: zipkin: address: zipkin.istio-system:9411 enablePrometheusMerg: true rootNamespace: istio-system trustDomain: cluster.local --- apiVersion: v1 kind: ConfigMap metadata: name: is...

    - '*'
    operations:
    - CREATE
    - UPDATE
    resources:
    - '*'
  sideEffects: None

---
apiVersion: v1
data:
  mesh: |-
    defaultConfig:
      discoveryAddress: istiod.istio-system.svc:15012
      tracing:
        zipkin:
          address: zipkin.istio-system:9411
    defaultProviders:
      metrics:
      - prometheus
    enablePrometheusMerge: true

				Tracing: &meshconfig.Tracing{
					CustomTags:       tc.in.CustomTags,
					MaxPathTagLength: tc.in.MaxPathTagLength,
					Sampling:         tc.in.Sampling,
				},
				DiscoveryAddress: "istiod.istio-system.svc:15012",
			}
			listeners := buildListeners(t, TestOptions{MeshConfig: m}, nil)
			httpProxy := xdstest.ExtractListener("127.0.0.1_15007", listeners)

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15010"
proxy_admin_port:          15000
control_plane_auth_policy: NONE

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15011"
proxy_admin_port:          15000
control_plane_auth_policy: MUTUAL_TLS

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15010"
proxy_admin_port:          15000
control_plane_auth_policy: NONE

config_path:               "/etc/istio/proxy"
binary_path:               "/usr/local/bin/envoy"
service_cluster:           "istio-proxy"
drain_duration:            {seconds: 2}
discovery_address:         "istio-pilot:15010"
proxy_admin_port:          15000
control_plane_auth_policy: NONE
tracing:                   { zipkin: { address: "localhost:6000" }, tls_settings: { mode: SIMPLE, ca_certificates: "/etc/zipkin/ca.pem"}}