{{- if .Values.global.imagePullSecrets }}
      imagePullSecrets:
        {{- range .Values.global.imagePullSecrets }}
        - name: {{ . }}
        {{- end }}
      {{- end }}
  waypoint: |
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: {{.ServiceAccount | quote}}
      namespace: {{.Namespace | quote}}
      annotations:

      {{- if .Values.global.imagePullSecrets }}
      imagePullSecrets:
        {{- range .Values.global.imagePullSecrets }}
        - name: {{ . }}
        {{- end }}
      {{- end }}
  waypoint: |
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: {{.ServiceAccount | quote}}
      namespace: {{.Namespace | quote}}
      annotations:

) ([]*discovery.Resource, model.XdsLogDetails) {
	var routeConfigurations model.Resources

	efw := req.Push.EnvoyFilters(node)
	hit, miss := 0, 0
	switch node.Type {
	case model.SidecarProxy, model.Waypoint:
		vHostCache := make(map[int][]*route.VirtualHost)
		// dependent envoyfilters' key, calculate in front once to prevent calc for each route.
		envoyfilterKeys := efw.KeysApplyingTo(

          imagePullSecrets:
            {{- range .Values.global.imagePullSecrets }}
            - name: {{ . }}
            {{- end }}
          {{- end }}
      waypoint: |
        apiVersion: v1
        kind: ServiceAccount
        metadata:
          name: {{.ServiceAccount | quote}}
          namespace: {{.Namespace | quote}}
          annotations:

    - header: "x-jwt-iss"
      claim: "iss"
    - header: "x-jwt-wrong-header"
      claim: "wrong_claim"
---
`
	matchers := []match.Matcher{match.And(
		// No waypoint here, these are all via ingress which doesn't forward to waypoint
		match.NotWaypoint,
		match.Or(match.ServiceName(t.Apps.B.NamespacedName()), match.AmbientCaptured()),
	)}
	headersWithToken := map[string][]string{

			server, programmed := buildListener(r, obj, l, i, controllerName)

			servers = append(servers, server)
			if controllerName == constants.ManagedGatewayMeshController {
				// Waypoint doesn't actually convert the routes to VirtualServices
				continue
			}
			meta := parentMeta(obj, &l.Name)
			meta[constants.InternalGatewaySemantics] = constants.GatewaySemanticsGateway

end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "grpc-agent") }} grpc-agent: | {{ .Files.Get "files/grpc-agent.yaml" | trim | indent 8 }} {{- end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "waypoint") }} waypoint: | {{ .Files.Get "files/waypoint.yaml" | trim | indent 8 }} {{- end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "kube-gateway") }} kube-gateway: | {{ .Files.Get "files/kube-gateway.yaml" | trim | indent 8 }} {{- end }} {{- with .Values.si...

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 46540

releaseNotes:
- |

No waypoints found....

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
releaseNotes:
  - |
    **Fixed** Waypoints missing the `ISTIO_META_NETWORK` field. It can be configured at install time using