}
  }
  attr {
    key: "num_outs"
    value {
      i: 2
    }
  }
}
node {
  name: "Case/pivot_0/_4"
  op: "Identity"
  input: "Case/branch_index/_3"
  attr {
    key: "T"
    value {
      type: DT_INT32
    }
  }
}
node {
  name: "Case/pivot_1/_5"
  op: "Identity"
  input: "Case/branch_index/_3:1"
  attr {
    key: "T"
    value {
      type: DT_INT32

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    pilot:
      k8s:
        resources:
          requests:
            cpu: 1000m # override from default 500m
            memory: 4096Mi # ... default 2048Mi
        hpaSpec:
          maxReplicas: 10 # ... default 5

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  values:
    pilot:

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    pilot:
      k8s:
        overlays:
        - kind: Deployment
          name: istiod
          patches:
          - path: spec.template.spec.containers.[name:discovery].args.[30m]
            value: "60m" # OVERRIDDEN
          - path: spec.template.spec.containers.[name:discovery].ports.[containerPort:8080].containerPort
            value: 8090 # OVERRIDDEN

                  "type": "prometheus",
                  "uid": "$datasource"
               },
               "expr": "sum(istio_build{component=\"pilot\"}) by (tag)",
               "legendFormat": "Version ({{tag}})"
            }
         ],
         "title": "Pilot Versions",
         "type": "timeseries"
      },
      {
         "collapsed": false,
         "gridPos": {
            "h": 1,
            "w": 24,

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
  - 42612
releaseNotes:
  - |

area: installation
issue:
- 49290
releaseNotes:
- |
  **Improved** helm value field names to configure whether an existing CNI install
   will be used. Instead of values.istio_cni the enablement fields will be in
   values.pilot.cni as istiod is the affected component.
   That is clearer than having values.cni for install config and values.istio_cni
   for enablement in istiod. The old values.istio_cni fields will still be supported

Anton Patsev <******@****.***> 1707328404 +0600

				retry.UntilSuccessOrFail(t, func() error {
					if len(getWorkloadEntriesOrFail(t, autoVM)) > 0 {
						return errors.New("expected 0 WorkloadEntries")
					}
					return nil
				}, retry.Timeout(2*features.WorkloadEntryCleanupGracePeriod+(2*time.Second)))
			})
		})
}

func disconnectProxy(t framework.TestContext, pilot string, instance echo.Instance) {

issue:
  - 36916


# releaseNotes is a markdown listing of any user facing changes. This will appear in the
# release notes.
releaseNotes:
- |
  **Improved** Pilot will now load its DNS serving certificate from well known locations:
  ```
  /var/run/secrets/istiod/tls/tls.crt
  /var/run/secrets/istiod/tls/tls.key
  /var/run/secrets/istiod/ca/root-cert.pem
  ```