iop.yaml

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  meshConfig:
    accessLogFile: "/dev/stdout"
    accessLogEncoding: 1                      # 0 for TEXT logs 1 for JSON logs
    enableTracing: false
    defaultConfig:
      sds:
        enabled: true                         #SDS is enabled by default in 1.6.x
  components:
    ingressGateways:
      - name: istio-ingressgateway        # Notice the name matches with deployment
        enabled: true
        k8s:
          hpaSpec:
            minReplicas: 2
            maxReplicas: 5
          service:
            loadBalancerIP: "xx.xx.xx.xx"
            externalTrafficPolicy: Local
            ports:
              - targetPort: 80
                name: http2
                nodePort: 31380
                port: 80
              - name: https
                nodePort: 31390
                port: 443
              - name: tcp
                nodePort: 31400
                port: 31400
              - name: tls
                targetPort: 15443
                port: 15443
      - name: istio-ilbgateway      # Name must match your existing ig deployment 
        enabled: true
        label:
          app: istio-ilbgateway     # If you don't apply these labels, The gateway service
          istio: ilbgateway         # will select the istio-ingressgateway deployment
        k8s:
          serviceAnnotations:
            cloud.google.com/load-balancer-type: "internal"  # use this annotation to make LB internal
          service:
            loadBalancerIP: "xx.xx.xx.xx"
            ports:
              - targetPort: 80
                name: http
                port: 80