istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/helm-profiles/ambient.yaml (about)

     1  # The ambient profile enables ambient mode. The Istiod, CNI, and ztunnel charts must be deployed
     2  meshConfig:
     3    defaultConfig:
     4      proxyMetadata:
     5        ISTIO_META_ENABLE_HBONE: "true"
     6  global:
     7    variant: distroless
     8  pilot:
     9    env:
    10      PILOT_ENABLE_AMBIENT: "true"
    11      CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel"
    12  cni:
    13    ambient:
    14      enabled: true
    15  
    16  # Ztunnel doesn't use a namespace, so everything here is mostly for ztunnel
    17  variant: distroless