gistfile1.txt

gateways:
  enabled: true
  istio-ingressgateway:
    autoscaleMin: 2
    autoscaleMax: 5
  istio-egressgateway:
    enabled: true
    autoscaleMin: 2
    autoscaleMax: 5

mixer:
  policy:
    enabled: true
    autoscaleMin: 2
    autoscaleMax: 5

  telemetry:
    enabled: true
    autoscaleMin: 2
    autoscaleMax: 5

pilot:
  enabled: true
  autoscaleMin: 2
  autoscaleMax: 5
  enableProtocolSniffingForOutbound: false

grafana:
  enabled: true
  persist: true
  storageClassName: gp2v2
  accessMode: ReadWriteOnce

prometheus:
  enabled: true
  replicaCount: 2

tracing:
  enabled: true

kiali:
  enabled: true
  replicaCount: 2
  dashboard:
    grafanaURL: http://grafana.istio-system:3000
    jaegerURL: http://tracing.istio-system

istio_cni:
  enabled: true

istiocoredns:
  enabled: false

global:
  hub: docker.io/istio
  tag: 1.5.8
  logging:
    level: "default:info"

  monitoringPort: 15014

  proxy:
    image: proxyv2
    clusterDomain: "cluster.local"
    resources:
      requests:
        cpu: 100m
        memory: 128Mi
      limits:
        cpu: 2000m
        memory: 1024Mi

    concurrency: 2
    accessLogFile: ""
    accessLogFormat: ""
    accessLogEncoding: TEXT

    envoyAccessLogService:
      enabled: false
      host: 
      port: 
      tlsSettings:
        mode: DISABLE 
        clientCertificate: 
        privateKey: 
        caCertificates: 
        sni: 
        subjectAltNames: []
        
      tcpKeepalive:
        probes: 3
        time: 10s
        interval: 10s

    logLevel: ""

    componentLogLevel: ""

    outlierLogPath: 

    protocolDetectionTimeout: 100ms

    privileged: false

    enableCoreDump: false

    enableCoreDumpImage: ubuntu:xenial

    statusPort: 15020

    readinessInitialDelaySeconds: 1

    readinessPeriodSeconds: 2

    readinessFailureThreshold: 30
    
    includeIPRanges: "<list_of_cidr_blocks>"
    excludeIPRanges: ""
    excludeOutboundPorts: ""
    excludeInboundPorts: ""

    autoInject: enabled

    envoyStatsd:
      enabled: false
      host: 
      port: 

    envoyMetricsService:
      enabled: false
      host: 
      port: 
      tlsSettings:
        mode: DISABLE 
        clientCertificate: 
        privateKey:        
        caCertificates:    
        sni:               
        subjectAltNames: []
        
      tcpKeepalive:
        probes: 3
        time: 10s
        interval: 10s
    
    tracer: "zipkin"

  proxy_init:
    image: proxyv2
    resources:
      limits:
        cpu: 100m
        memory: 50Mi
      requests:
        cpu: 10m
        memory: 10Mi

  imagePullPolicy: IfNotPresent

  controlPlaneSecurityEnabled: true

  disablePolicyChecks: true

  policyCheckFailOpen: false

  enableTracing: true
  
  tracer:
    lightstep:
      address: ""                
      accessToken: ""            
    zipkin:
      address: ""
    datadog:
      address: "$(HOST_IP):8126"
    stackdriver:
      debug: false
      maxNumberOfAttributes: 200
      maxNumberOfAnnotations: 200
      maxNumberOfMessageEvents: 200

  mtls:
    enabled: false

  imagePullSecrets: []

  arch:
    amd64: 2
    s390x: 2
    ppc64le: 2
  
  oneNamespace: false

  defaultNodeSelector: {}

  defaultTolerations: []

  configValidation: true

  meshExpansion:
    enabled: false
    useILB: false

  multiCluster:
    enabled: false
    clusterName: ""
  defaultResources:
    requests:
      cpu: 10m

  defaultPodDisruptionBudget:
    enabled: true

  priorityClassName: ""

  useMCP: true
  
  trustDomain: ""

  trustDomainAliases: []

  meshID: ""

  outboundTrafficPolicy:
    mode: ALLOW_ANY

  sds:
    enabled: false
    udsPath: ""
    token:
      aud: istio-ca
  
  meshNetworks: {}

  network: ""

  localityLbSetting:
    enabled: true

  enableHelmTest: false

  certificates: []
  
  operatorManageWebhooks: false