}

	// Write kubeconfig with our current service account token as the contents, to the Istio agent rundir.
	// We do not write this to the common/shared CNI config dir, because it's not CNI config, we do not
	// need to watch it, and writing non-shared stuff to that location creates churn for other node agents.
	// Only our plugin consumes this kubeconfig, and it resides in our owned rundir on the host node,

	// Since it runs out-of-process, it has to be separately configured
	PluginLogLevel string
	// The file mode to set when creating the kubeconfig file
	KubeconfigMode int
	// CA file for kubeconfig
	KubeCAFile string
	// Whether to use insecure TLS in the kubeconfig file
	SkipTLSVerify bool

	// Comma-separated list of K8S namespaces that CNI should ignore
	ExcludeNamespaces string

	// KUBERNETES_SERVICE_PROTOCOL

{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "istio-cni",
  "ipam": {},
  "dns": {},
  "plugin_log_level": "debug",
  "cni_agent_run_dir": "/path/to/kubeconfig",
  "ambient_enabled": false,
  "exclude_namespaces": [
    ""
  ]

        "subnet": "10.1.0.0/16",
        "type": "host-local"
      },
      "name": "dbnet",
      "type": "bridge"
    },
    {
      "ambient_enabled": false,
      "cni_agent_run_dir": "/path/to/kubeconfig",
      "dns": {},
      "exclude_namespaces": [
        ""
      ],
      "ipam": {},
      "name": "istio-cni",
      "plugin_log_level": "debug",
      "type": "istio-cni"
    }
  ]

	"istio.io/istio/istioctl/pkg/cli"
)

const (
	clusterNameAnnotationKey = "networking.istio.io/cluster"
)

// KubeOptions contains kubernetes options common to all commands.
type KubeOptions struct {
	Kubeconfig string
	Context    string
	Namespace  string
}

// Inherit the common kubernetes flags defined in the root package. This is a bit of a hack,

	ChainedCNIPlugin         = "chained-cni-plugin"
	CNINetworkConfigFile     = "cni-network-config-file"
	CNINetworkConfig         = "cni-network-config"
	LogLevel                 = "log-level"
	KubeconfigMode           = "kubeconfig-mode"
	KubeCAFile               = "kube-ca-file"
	SkipTLSVerify            = "skip-tls-verify"
	MonitoringPort           = "monitoring-port"
	LogUDSSocket             = "log-uds-socket"

      "type": "bridge"
    },
    {
      "sysctl": {
        "net.core.somaxconn": "500"
      },
      "type": "tuning"
    },
    {
      "ambient_enabled": false,
      "cni_agent_run_dir": "/path/to/kubeconfig",
      "dns": {},
      "exclude_namespaces": [
        ""
      ],
      "ipam": {},
      "name": "istio-cni",
      "plugin_log_level": "debug",
      "type": "istio-cni"
    }
  ]

	registerIntegerParameter(constants.KubeconfigMode, constants.DefaultKubeconfigMode, "File mode of the kubeconfig file")
	registerStringParameter(constants.KubeCAFile, "", "CA file for kubeconfig. Defaults to the same as install-cni pod")
	registerBooleanParameter(constants.SkipTLSVerify, false, "Whether to use insecure TLS in kubeconfig file")
	registerIntegerParameter(constants.MonitoringPort, 15014, "HTTP port to serve prometheus metrics")

			// Create existing binary files
			if err := os.WriteFile(filepath.Join(cniBinDir, "istio-cni"), []byte{1, 2, 3}, 0o755); err != nil {
				t.Fatal(err)
			}

			// Create kubeconfig
			kubeConfigFilePath := filepath.Join(cniNetDir, "kubeconfig")
			if err := os.WriteFile(kubeConfigFilePath, []byte{1, 2, 3}, 0o755); err != nil {
				t.Fatal(err)
			}

			cfg := &config.InstallConfig{
				MountedCNINetDir: cniNetDir,

{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "istio-cni",
  "plugin_log_level": "__LOG_LEVEL__",
  "kubernetes": {
      "kubeconfig": "__KUBECONFIG_FILENAME__",
      "cni_bin_dir": "/path/cni/bin"
  }