helm:
        valuesObject:
          revision: rapid
          cni:
            cniBinDir: "/home/kubernetes/bin"
        valueFiles:
          - >-
            $values/manifests/charts/istio-cni/ambient-values.yaml
      chart: cni
    - repoURL: 'https://github.com/istio/istio.git'
      targetRevision: HEAD

# releaseNotes is a markdown listing of any user facing changes. This will appear in the
# release notes.
releaseNotes:
- |
  **Improved** `istioctl analyze` to find the exact line number with configuration errors when analyzing yaml files.

set -o errexit
set -o nounset
set -o pipefail

KUBE_ROOT=$(dirname "${BASH_SOURCE[0]}")/..
cd "${KUBE_ROOT}"

# generate json spec -> yaml
test/conformance/gen-conformance-yaml.sh
# replace checked-in yaml

spec:
  destination:
    name: ambient-cluster
    namespace: ambient
  source:
    path: application
    repoURL: '{repo-placeholder}'
    targetRevision: HEAD
    directory:
      exclude: application.yaml
  project: default
  syncPolicy:
    automated:
      prune: true

    ingressGateways:
    - name: istio-ingressgateway
      enabled: true
    egressGateways:
    - name: istio-egressgateway
      enabled: false

  # Most default values come from the helm chart's values.yaml
  # Below are the things that differ
  values:
    defaultRevision: ""
    global:
      istioNamespace: istio-system
      configValidation: true
    gateways:
      istio-ingressgateway: {}

kind: feature
area: istioctl

issue:
  - 31695

docs:
 - '[usage] https://istio.io/latest/docs/reference/commands/istioctl/#istioctl-proxy-config'

releaseNotes:
- |

    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://github.com/istio/istio.git'
    targetRevision: HEAD
    path: samples/addons
    directory:
      exclude: loki.yaml
  destination:
    name: ambient-cluster
    namespace: istio-system
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:

# Created with `curl -Ls https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.7.1/components.yaml > prow/config/metrics/metrics.yaml`
# With a startup probe and `--kubelet-insecure-tls` added.
apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: metrics-server
  name: metrics-server
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:

set -o errexit
set -o nounset
set -o pipefail

KUBE_ROOT=$(dirname "${BASH_SOURCE[0]}")/..
cd "${KUBE_ROOT}"

# generate json spec -> yaml
test/conformance/gen-conformance-yaml.sh

# diff generated and checked-in
if diff -u test/conformance/testdata/conformance.yaml _output/conformance.yaml; then
  echo PASS
  exit 0
fi
echo 'See instructions in test/conformance/README.md'

kind: Gateway
metadata:
  name: istio-egressgateway
  namespace: testns
spec:
  selector:
    # DO NOT CHANGE THESE LABELS
    # The egressgateway is defined in install/kubernetes/helm/istio/values.yaml
    # with these labels
    istio: egressgateway
  servers:
  - port:
      number: 80 #also declared in gateway's deployment files
      name: http
      protocol: HTTP
    hosts: