istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/istio-operator/files/profile-ambient.yaml (about)

     1  # WARNING: DO NOT EDIT, THIS FILE IS A COPY.
     2  # The original version of this file is located at /manifests/helm-profiles directory.
     3  # If you want to make a change in this file, edit the original one and run "make gen".
     4  
     5  # The ambient profile enables ambient mode. The Istiod, CNI, and ztunnel charts must be deployed
     6  meshConfig:
     7    defaultConfig:
     8      proxyMetadata:
     9        ISTIO_META_ENABLE_HBONE: "true"
    10  global:
    11    variant: distroless
    12  pilot:
    13    env:
    14      PILOT_ENABLE_AMBIENT: "true"
    15      CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel"
    16  cni:
    17    ambient:
    18      enabled: true
    19  
    20  # Ztunnel doesn't use a namespace, so everything here is mostly for ztunnel
    21  variant: distroless