},
      "type": "tuning"
    },
    {
      "kubernetes": {
        "cni_bin_dir": "/path/cni/bin",
        "kubeconfig": "/path/to/kubeconfig"
      },
      "log_level": "debug",
      "name": "istio-cni",
      "type": "istio-cni"
    }
  ]

      creationTimestamp: null
      labels:
        app: hello
        tier: backend
        track: stable
    spec:
      containers:
      - image: docker.io/istio/proxy_debug:unittest
        name: istio-proxy
        resources: {}
      - image: fake.docker.io/google-samples/hello-go-gke:1.0
        name: hello
        ports:
        - containerPort: 80
          name: http

// This is a sample chained plugin that supports multiple CNI versions. It
// parses prevResult according to the cniVersion
package plugin

import (
	"context"
	"encoding/json"
	"fmt"
	"runtime/debug"
	"strconv"
	"time"

	"github.com/containernetworking/cni/pkg/skel"
	"github.com/containernetworking/cni/pkg/types"
	cniv1 "github.com/containernetworking/cni/pkg/types/100"

Gateways and basic VirtualService. It is still possible to only configure the ports in Service, and do manual
config for the rest.

All internal services ( telemetry, pilot debug ports, mesh expansion ) can now be configured via the new mechanism.

# Migration from istio-system

Istio 1.0 includes the gateways in istio-system. Since the external IP is associated

|CREDENTIAL_IDENTITY_PROVIDER|just used to control the audience for VMs with existing identity|
|PROXY_XDS_VIA_AGENT|use istio-agent to proxy XDS. True for all use cases now, likely can be always-on now or soon|
|PROXY_XDS_DEBUG_VIA_AGENT|Offer XDS istio.io/debug API on agent's 15004 HTTP endpoint. (Requires PROXY_XDS_VIA_AGENT)|
|{XDS,CA}_ROOT_CA|explicitly configure root certificate path|

			LogUDSAddress:      "",
			CNINetworkConfig:   cniNetworkConfig,
			KubeconfigFilename: "ZZZ-istio-cni-kubeconfig",
			CNINetDir:          "/etc/cni/net.d",
			ChainedCNIPlugin:   true,
			LogLevel:           "debug",
			KubeconfigMode:     constants.DefaultKubeconfigMode,
		},
	}

	if cniConfFileName != "" {
		installConfig.InstallConfig.CNIConfName = cniConfFileName
	}
	if !chainedCNIPlugin {

fi

# BUILD LD_EXTRAFLAGS
LD_EXTRAFLAGS=""

while read -r line; do
    LD_EXTRAFLAGS="${LD_EXTRAFLAGS} -X ${line}"
done < "${BUILDINFO}"

OPTIMIZATION_FLAGS=(-trimpath)
if [ "${DEBUG}" == "1" ]; then
    OPTIMIZATION_FLAGS=()
fi

time GOOS=${BUILD_GOOS} GOARCH=${BUILD_GOARCH} ${GOBINARY} build \
        ${V} "${GOBUILDFLAGS_ARRAY[@]}" ${GCFLAGS:+-gcflags "${GCFLAGS}"} \
        -o "${OUT}" \

    lifecycle:
      preStop:
        exec:
          command:
          - pilot-agent
          - request
          - --debug-port={{(annotation .ObjectMeta `status.sidecar.istio.io/port` .Values.global.proxy.statusPort)}}
          - POST
          - drain
  {{- end }}
    env:
    {{- if eq .InboundTrafficPolicyMode "localhost" }}

    lifecycle:
      preStop:
        exec:
          command:
          - pilot-agent
          - request
          - --debug-port={{(annotation .ObjectMeta `status.sidecar.istio.io/port` .Values.global.proxy.statusPort)}}
          - POST
          - drain
  {{- end }}
    env:
    {{- if eq .InboundTrafficPolicyMode "localhost" }}

# Address of the Datadog Agent address: {{ ((.Values.global.tracer).datadog).address | default "$(HOST_IP):8126" }} {{- else if eq .Values.global.proxy.tracer "stackdriver" }} stackdriver: # enables trace output to stdout. debug: {{ (($.Values.global.tracer).stackdriver).debug | default "false" }} # The global default max number of attributes per span. maxNumberOfAttribute: {{ (($.Values.global.tracer).stackdriver).maxNumberOfAttribute | default "200" }} # The global default max number of annotation...