Namespace: "default",
		WorkloadLabels: labels.Instance{
			constants.GatewayNameLabel: "sample-waypoint",
		},
		IsWaypoint: true,
	}
	serviceTarget := WorkloadPolicyMatcher{
		Namespace: "default",
		WorkloadLabels: labels.Instance{
			"app":                      "my-app",
			constants.GatewayNameLabel: "sample-waypoint",
		},
		IsWaypoint: true,
		Service:    "sample-svc",
	}
	tests := []struct {

	return AuthzDerivedPolicies, Policies
}

func implicitWaypointPolicyName(waypoint *Waypoint) string {
	if !features.DefaultAllowFromWaypoint || waypoint == nil || len(waypoint.ServiceAccounts) == 0 {
		return ""
	}
	// use '_' character since those are illegal in k8s names
	return "istio_allow_waypoint_" + waypoint.Namespace + "_" + waypoint.Name
}

bookinfo           bookinfo-productpage-istio-waypoint-5cdd6745d5-rc2gg 10.244.2.59 ambient-worker2       None                                TCP
bookinfo           details-v1-698d88b-dqrbr                             10.244.2.51 ambient-worker2       namespace-istio-waypoint            HBONE

NAMESPACE     NAME         REVISION     PROGRAMMED
default       waypoint     default      True

kind: feature
area: istioctl
issue:
  - 49915
  - 50173
releaseNotes:
- |
  **Added** Allow user to name their waypoint through istioctl via --name flag on the waypoint cmd.

    **Added** the ability to annotate workloads or services with `istio.io/use-waypoint` pointing to Gateways of arbitrary gateway classes.

    These changes allow configuring a standard `istio` gateway as a Waypoint.
    For this to work, it must be configured as a `ClusterIP` Service with
    redirection enabled. This is colloquially referred to as a "gateway

		return iNode < jNode
	})

	fmt.Fprintln(w, "NAMESPACE\tPOD NAME\tIP\tNODE\tWAYPOINT\tPROTOCOL")

	for _, wl := range verifiedWorkloads {
		var ip string
		if len(wl.WorkloadIPs) > 0 {
			ip = wl.WorkloadIPs[0]
		}
		waypoint := waypointName(wl, zDump.Services)
		fmt.Fprintf(w, "%v\t%v\t%v\t%v\t%v\t%v\n",
			wl.Namespace, wl.Name, ip, wl.Node, waypoint, wl.Protocol)

	}
	return w.Flush()
}

apiVersion: release-notes/v2
kind: feature
area: istioctl
releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 49851
releaseNotes:
- |

	Zone    string `json:"zone,omitempty"`
	Subzone string `json:"subzone,omitempty"`
}

type ZtunnelWorkload struct {
	WorkloadIPs           []string          `json:"workloadIps"`
	Waypoint              *GatewayAddress   `json:"waypoint,omitempty"`
	NetworkGateway        *GatewayAddress   `json:"networkGateway,omitempty"`
	Protocol              string            `json:"protocol"`
	Name                  string            `json:"name"`