var (
    // IstioOperatorGVK is GVK for IstioOperator
    IstioOperatorGVK = schema.GroupVersionKind{
        Version: "v1alpha1",
        Group:   "install.istio.io",
        Kind:    "IstioOperator",
    }

    // SchemeGroupVersion is group version used to register these objects
    SchemeGroupVersion = schema.GroupVersion{Group: "install.istio.io", Version: "v1alpha1"}

    // SchemeGroupKind is group version used to register these objects
    SchemeGroupKind = schema.GroupKind{Group: "install.istio.io", Kind: "IstioOperator"}

    // SchemeBuilder is used to add go types to the GroupVersionKind scheme
    SchemeBuilder = &scheme.Builder{GroupVersion: SchemeGroupVersion}
)

var EmptyObjectKind = emptyObjectKind{}

var IngressControllerMode_name = map[int32]string{
    0:  "UNSPECIFIED",
    1:  "DEFAULT",
    2:  "STRICT",
    3:  "OFF",
}

var IngressControllerMode_value = map[string]int32{
    "UNSPECIFIED": 0,
    "DEFAULT":     1,
    "STRICT":      2,
    "OFF":         3,
}

var OutboundTrafficPolicyConfig_Mode_name = map[int32]string{
    0:  "ALLOW_ANY",
    1:  "REGISTRY_ONLY",
}

var OutboundTrafficPolicyConfig_Mode_value = map[string]int32{
    "ALLOW_ANY":     0,
    "REGISTRY_ONLY": 1,
}

var TelemetryV2StackDriverConfig_AccessLogging_name = map[int32]string{
    0:  "NONE",
    1:  "FULL",
    2:  "ERRORS_ONLY",
}

var TelemetryV2StackDriverConfig_AccessLogging_value = map[string]int32{
    "NONE":        0,
    "FULL":        1,
    "ERRORS_ONLY": 2,
}

var Tracer_name = map[int32]string{
    0:  "zipkin",
    1:  "lightstep",
    2:  "datadog",
    3:  "stackdriver",
    4:  "openCensusAgent",
}

var Tracer_value = map[string]int32{
    "zipkin":          0,
    "lightstep":       1,
    "datadog":         2,
    "stackdriver":     3,
    "openCensusAgent": 4,
}

type ArchConfig struct {
    // Sets pod scheduling weight for amd64 arch
    Amd64 uint32 `protobuf:"varint,1,opt,name=amd64,proto3" json:"amd64,omitempty"`
    // Sets pod scheduling weight for ppc64le arch.
    Ppc64Le uint32 `protobuf:"varint,2,opt,name=ppc64le,proto3" json:"ppc64le,omitempty"`
    // Sets pod scheduling weight for s390x arch.
    S390X                uint32   `protobuf:"varint,3,opt,name=s390x,proto3" json:"s390x,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type BaseConfig struct {
    // For Helm2 use, adds the CRDs to templates.
    EnableCRDTemplates *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enableCRDTemplates,proto3" json:"enableCRDTemplates,omitempty"`
    // URL to use for validating webhook.
    ValidationURL string `protobuf:"bytes,2,opt,name=validationURL,proto3" json:"validationURL,omitempty"`
    // For istioctl usage to disable istio config crds in base
    EnableIstioConfigCRDs *protobuf.BoolValue `protobuf:"bytes,3,opt,name=enableIstioConfigCRDs,proto3" json:"enableIstioConfigCRDs,omitempty"`
    XXX_NoUnkeyedLiteral  struct{}            `json:"-"`
    XXX_unrecognized      []byte              `json:"-"`
    XXX_sizecache         int32               `json:"-"`
}

type CNIConfig struct {
    // Controls whether CNI is enabled.
    Enabled              *protobuf.BoolValue    `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    Hub                  string                 `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
    Tag                  interface{}            `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
    Image                string                 `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
    PullPolicy           string                 `protobuf:"bytes,5,opt,name=pullPolicy,proto3" json:"pullPolicy,omitempty"`
    CniBinDir            string                 `protobuf:"bytes,6,opt,name=cniBinDir,proto3" json:"cniBinDir,omitempty"`
    CniConfDir           string                 `protobuf:"bytes,7,opt,name=cniConfDir,proto3" json:"cniConfDir,omitempty"`
    CniConfFileName      string                 `protobuf:"bytes,8,opt,name=cniConfFileName,proto3" json:"cniConfFileName,omitempty"`
    ExcludeNamespaces    []string               `protobuf:"bytes,9,rep,name=excludeNamespaces,proto3" json:"excludeNamespaces,omitempty"`
    PodAnnotations       map[string]interface{} `protobuf:"bytes,10,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"` // Deprecated: Do not use.
    PspClusterRole       string                 `protobuf:"bytes,11,opt,name=psp_cluster_role,json=pspClusterRole,proto3" json:"psp_cluster_role,omitempty"`
    LogLevel             string                 `protobuf:"bytes,12,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
    Repair               *CNIRepairConfig       `protobuf:"bytes,13,opt,name=repair,proto3" json:"repair,omitempty"`
    Chained              *protobuf.BoolValue    `protobuf:"bytes,14,opt,name=chained,proto3" json:"chained,omitempty"`
    Taint                *CNITaintConfig        `protobuf:"bytes,15,opt,name=taint,proto3" json:"taint,omitempty"`
    XXX_NoUnkeyedLiteral struct{}               `json:"-"`
    XXX_unrecognized     []byte                 `json:"-"`
    XXX_sizecache        int32                  `json:"-"`
}

type CNIRepairConfig struct {
    // Controls whether repair behavior is enabled.
    Enabled *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    Hub     string              `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
    Tag     interface{}         `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
    Image   string              `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
    // Controls whether various repair behaviors are enabled.
    LabelPods            bool     `protobuf:"varint,5,opt,name=labelPods,proto3" json:"labelPods,omitempty"`
    CreateEvents         string   `protobuf:"bytes,6,opt,name=createEvents,proto3" json:"createEvents,omitempty"` // Deprecated: Do not use.
    DeletePods           bool     `protobuf:"varint,7,opt,name=deletePods,proto3" json:"deletePods,omitempty"`
    BrokenPodLabelKey    string   `protobuf:"bytes,8,opt,name=brokenPodLabelKey,proto3" json:"brokenPodLabelKey,omitempty"`
    BrokenPodLabelValue  string   `protobuf:"bytes,9,opt,name=brokenPodLabelValue,proto3" json:"brokenPodLabelValue,omitempty"`
    InitContainerName    string   `protobuf:"bytes,10,opt,name=initContainerName,proto3" json:"initContainerName,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type CNITaintConfig struct {
    // Controls whether taint behavior is enabled.
    Enabled              *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type CPUTargetUtilizationConfig struct {
    // K8s utilization setting for HorizontalPodAutoscaler target.
    //
    // See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
    TargetAverageUtilization int32    `protobuf:"varint,1,opt,name=targetAverageUtilization,proto3" json:"targetAverageUtilization,omitempty"`
    XXX_NoUnkeyedLiteral     struct{} `json:"-"`
    XXX_unrecognized         []byte   `json:"-"`
    XXX_sizecache            int32    `json:"-"`
}

type DefaultPodDisruptionBudgetConfig struct {
    // Controls whether a PodDisruptionBudget with a default minAvailable value of 1 is created for each deployment.
    Enabled              *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type DefaultResourcesConfig struct {
    // k8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Requests             *ResourcesRequestsConfig `protobuf:"bytes,1,opt,name=requests,proto3" json:"requests,omitempty"`
    XXX_NoUnkeyedLiteral struct{}                 `json:"-"`
    XXX_unrecognized     []byte                   `json:"-"`
    XXX_sizecache        int32                    `json:"-"`
}

type EgressGatewayConfig struct {
    // Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
    AutoscaleEnabled *protobuf.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
    // maxReplicas setting for HorizontalPodAutoscaler.
    AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
    // minReplicas setting for HorizontalPodAutoscaler.
    AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
    // K8s utilization setting for HorizontalPodAutoscaler target.
    //
    // See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
    Cpu *CPUTargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"` // Deprecated: Do not use.
    // Controls whether an egress gateway is enabled.
    Enabled *protobuf.BoolValue `protobuf:"bytes,7,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Environment variables passed to the proxy container.
    Env    map[string]interface{} `protobuf:"bytes,8,opt,name=env,proto3" json:"env,omitempty"`
    Labels map[string]string      `protobuf:"bytes,9,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
    Name   string                 `protobuf:"bytes,25,opt,name=name,proto3" json:"name,omitempty"`
    // K8s node selector.
    //
    // See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
    NodeSelector map[string]interface{} `protobuf:"bytes,10,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"` // Deprecated: Do not use.
    // K8s annotations for pods.
    //
    // See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
    PodAnnotations map[string]interface{} `protobuf:"bytes,11,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"` // Deprecated: Do not use.
    // Pod anti-affinity label selector.
    //
    // Specify the pod anti-affinity that allows you to constrain which nodes
    // your pod is eligible to be scheduled based on labels on pods that are
    // already running on the node rather than based on labels on nodes.
    // There are currently two types of anti-affinity:
    //    "requiredDuringSchedulingIgnoredDuringExecution"
    //    "preferredDuringSchedulingIgnoredDuringExecution"
    // which denote “hard” vs. “soft” requirements, you can define your values
    // in "podAntiAffinityLabelSelector" and "podAntiAffinityTermLabelSelector"
    // correspondingly.
    // See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
    //
    // Examples:
    // podAntiAffinityLabelSelector:
    //  - key: security
    //    operator: In
    //    values: S1,S2
    //    topologyKey: "kubernetes.io/hostname"
    //  This pod anti-affinity rule says that the pod requires not to be scheduled
    //  onto a node if that node is already running a pod with label having key
    //  “security” and value “S1”.
    PodAntiAffinityLabelSelector []map[string]interface{} `protobuf:"bytes,12,opt,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"` // Deprecated: Do not use.
    // See PodAntiAffinityLabelSelector.
    PodAntiAffinityTermLabelSelector []map[string]interface{} `protobuf:"bytes,13,opt,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"` // Deprecated: Do not use.
    // Ports Configuration for the egress gateway service.
    Ports []*PortsConfig `protobuf:"bytes,14,rep,name=ports,proto3" json:"ports,omitempty"`
    // K8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Resources *Resources `protobuf:"bytes,15,opt,name=resources,proto3" json:"resources,omitempty"` // Deprecated: Do not use.
    // Config for secret volume mounts.
    SecretVolumes []*SecretVolume `protobuf:"bytes,16,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
    // Annotations to add to the egress gateway service.
    ServiceAnnotations map[string]interface{} `protobuf:"bytes,17,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
    // Service type.
    //
    // See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
    Type string `protobuf:"bytes,18,opt,name=type,proto3" json:"type,omitempty"`
    // Enables cross-cluster access using SNI matching.
    Zvpn        *ZeroVPNConfig           `protobuf:"bytes,19,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
    Tolerations []map[string]interface{} `protobuf:"bytes,20,opt,name=tolerations,proto3" json:"tolerations,omitempty"` // Deprecated: Do not use.
    // K8s rolling update strategy
    RollingMaxSurge *IntOrStringForPB `protobuf:"bytes,21,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"` // Deprecated: Do not use.
    // K8s rolling update strategy
    RollingMaxUnavailable *IntOrStringForPB        `protobuf:"bytes,22,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"` // Deprecated: Do not use.
    ConfigVolumes         []map[string]interface{} `protobuf:"bytes,23,opt,name=configVolumes,proto3" json:"configVolumes,omitempty"`
    AdditionalContainers  []map[string]interface{} `protobuf:"bytes,24,opt,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
    RunAsRoot             *protobuf.BoolValue      `protobuf:"bytes,26,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
    XXX_NoUnkeyedLiteral  struct{}                 `json:"-"`
    XXX_unrecognized      []byte                   `json:"-"`
    XXX_sizecache         int32                    `json:"-"`
}

type GatewaysConfig struct {
    // Configuration for an egress gateway.
    IstioEgressgateway *EgressGatewayConfig `protobuf:"bytes,1,opt,name=istio_egressgateway,json=istio-egressgateway,proto3" json:"istio_egressgateway,omitempty"`
    // Controls whether any gateways are enabled.
    Enabled *protobuf.BoolValue `protobuf:"bytes,2,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Configuration for an ingress gateway.
    IstioIngressgateway  *IngressGatewayConfig `protobuf:"bytes,4,opt,name=istio_ingressgateway,json=istio-ingressgateway,proto3" json:"istio_ingressgateway,omitempty"`
    XXX_NoUnkeyedLiteral struct{}              `json:"-"`
    XXX_unrecognized     []byte                `json:"-"`
    XXX_sizecache        int32                 `json:"-"`
}

type GlobalConfig struct {
    // Specifies pod scheduling arch(amd64, ppc64le, s390x) and weight as follows:
    //   0 - Never scheduled
    //   1 - Least preferred
    //   2 - No preference
    //   3 - Most preferred
    //
    // Deprecated: replaced by the affinity k8s settings which allows architecture nodeAffinity configuration of this behavior.
    Arch                *ArchConfig `protobuf:"bytes,1,opt,name=arch,proto3" json:"arch,omitempty"` // Deprecated: Do not use.
    ConfigRootNamespace string      `protobuf:"bytes,50,opt,name=configRootNamespace,proto3" json:"configRootNamespace,omitempty"`
    // Controls whether the server-side validation is enabled.
    ConfigValidation                *protobuf.BoolValue `protobuf:"bytes,3,opt,name=configValidation,proto3" json:"configValidation,omitempty"`
    DefaultConfigVisibilitySettings []string            `protobuf:"bytes,52,rep,name=defaultConfigVisibilitySettings,proto3" json:"defaultConfigVisibilitySettings,omitempty"`
    // Default k8s node selector for all the Istio control plane components
    //
    // See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
    DefaultNodeSelector map[string]interface{} `protobuf:"bytes,6,opt,name=defaultNodeSelector,proto3" json:"defaultNodeSelector,omitempty"` // Deprecated: Do not use.
    // Specifies the default pod disruption budget configuration.
    DefaultPodDisruptionBudget *DefaultPodDisruptionBudgetConfig `protobuf:"bytes,7,opt,name=defaultPodDisruptionBudget,proto3" json:"defaultPodDisruptionBudget,omitempty"` // Deprecated: Do not use.
    // Default k8s resources settings for all Istio control plane components.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    DefaultResources   *DefaultResourcesConfig  `protobuf:"bytes,9,opt,name=defaultResources,proto3" json:"defaultResources,omitempty"`      // Deprecated: Do not use.
    DefaultTolerations []map[string]interface{} `protobuf:"bytes,55,opt,name=defaultTolerations,proto3" json:"defaultTolerations,omitempty"` // Deprecated: Do not use.
    // Specifies the docker hub for Istio images.
    Hub string `protobuf:"bytes,12,opt,name=hub,proto3" json:"hub,omitempty"`
    // Specifies the image pull policy for the Istio images. one of Always, Never, IfNotPresent.
    // Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
    //
    // More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
    ImagePullPolicy  string   `protobuf:"bytes,13,opt,name=imagePullPolicy,proto3" json:"imagePullPolicy,omitempty"`
    ImagePullSecrets []string `protobuf:"bytes,37,rep,name=imagePullSecrets,proto3" json:"imagePullSecrets,omitempty"`
    // Specifies the default namespace for the Istio control plane components.
    IstioNamespace string              `protobuf:"bytes,14,opt,name=istioNamespace,proto3" json:"istioNamespace,omitempty"`
    LogAsJson      *protobuf.BoolValue `protobuf:"bytes,36,opt,name=logAsJson,proto3" json:"logAsJson,omitempty"`
    // Specifies the global logging level settings for the Istio control plane components.
    Logging *GlobalLoggingConfig `protobuf:"bytes,17,opt,name=logging,proto3" json:"logging,omitempty"`
    MeshID  string               `protobuf:"bytes,53,opt,name=meshID,proto3" json:"meshID,omitempty"`
    // Configure the mesh networks to be used by the Split Horizon EDS.
    //
    // The following example defines two networks with different endpoints association methods.
    // For `network1` all endpoints that their IP belongs to the provided CIDR range will be
    // mapped to network1. The gateway for this network example is specified by its public IP
    // address and port.
    // The second network, `network2`, in this example is defined differently with all endpoints
    // retrieved through the specified Multi-Cluster registry being mapped to network2. The
    // gateway is also defined differently with the name of the gateway service on the remote
    // cluster. The public IP for the gateway will be determined from that remote service (only
    // LoadBalancer gateway service type is currently supported, for a NodePort type gateway service,
    // it still need to be configured manually).
    //
    // meshNetworks:
    //   network1:
    //     endpoints:
    //     - fromCidr: "192.168.0.1/24"
    //     gateways:
    //     - address: 1.1.1.1
    //       port: 80
    //   network2:
    //     endpoints:
    //     - fromRegistry: reg1
    //     gateways:
    //     - registryServiceName: istio-ingressgateway.istio-system.svc.cluster.local
    //       port: 443
    //
    MeshNetworks map[string]interface{} `protobuf:"bytes,19,opt,name=meshNetworks,proto3" json:"meshNetworks,omitempty"`
    // Specifies the Configuration for Istio mesh across multiple clusters through Istio gateways.
    MultiCluster *MultiClusterConfig `protobuf:"bytes,22,opt,name=multiCluster,proto3" json:"multiCluster,omitempty"`
    Network      string              `protobuf:"bytes,39,opt,name=network,proto3" json:"network,omitempty"`
    // Custom DNS config for the pod to resolve names of services in other
    // clusters. Use this to add additional search domains, and other settings.
    // see https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#dns-config
    // This does not apply to gateway pods as they typically need a different
    // set of DNS settings than the normal application pods (e.g. in multicluster scenarios).
    PodDNSSearchNamespaces       []string            `protobuf:"bytes,43,rep,name=podDNSSearchNamespaces,proto3" json:"podDNSSearchNamespaces,omitempty"`
    OmitSidecarInjectorConfigMap *protobuf.BoolValue `protobuf:"bytes,38,opt,name=omitSidecarInjectorConfigMap,proto3" json:"omitSidecarInjectorConfigMap,omitempty"`
    // Controls whether to restrict the applications namespace the controller manages;
    // If set it to false, the controller watches all namespaces.
    OneNamespace           *protobuf.BoolValue `protobuf:"bytes,23,opt,name=oneNamespace,proto3" json:"oneNamespace,omitempty"`
    OperatorManageWebhooks *protobuf.BoolValue `protobuf:"bytes,41,opt,name=operatorManageWebhooks,proto3" json:"operatorManageWebhooks,omitempty"`
    // Specifies the k8s priorityClassName for the istio control plane components.
    //
    // See https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass
    PriorityClassName string `protobuf:"bytes,27,opt,name=priorityClassName,proto3" json:"priorityClassName,omitempty"` // Deprecated: Do not use.
    // Specifies how proxies are configured within Istio.
    Proxy *ProxyConfig `protobuf:"bytes,28,opt,name=proxy,proto3" json:"proxy,omitempty"`
    // Specifies the Configuration for proxy_init container which sets the pods' networking to intercept the inbound/outbound traffic.
    ProxyInit *ProxyInitConfig `protobuf:"bytes,29,opt,name=proxy_init,proto3" json:"proxy_init,omitempty"`
    // Specifies the Configuration for the SecretDiscoveryService instead of using K8S secrets to mount the certificates.
    Sds *SDSConfig `protobuf:"bytes,30,opt,name=sds,proto3" json:"sds,omitempty"`
    // Specifies the tag for the Istio docker images.
    Tag interface{} `protobuf:"bytes,31,opt,name=tag,proto3" json:"tag,omitempty"`
    // Specifies the Configuration for each of the supported tracers.
    Tracer *TracerConfig `protobuf:"bytes,33,opt,name=tracer,proto3" json:"tracer,omitempty"`
    // Specifies the trust domain that corresponds to the root cert of CA.
    TrustDomain string `protobuf:"bytes,34,opt,name=trustDomain,proto3" json:"trustDomain,omitempty"`
    // Controls whether to use of Mesh Configuration Protocol to distribute configuration.
    UseMCP *protobuf.BoolValue `protobuf:"bytes,35,opt,name=useMCP,proto3" json:"useMCP,omitempty"`
    // Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname.
    RemotePilotAddress string `protobuf:"bytes,48,opt,name=remotePilotAddress,proto3" json:"remotePilotAddress,omitempty"`
    // Specifies the configution of istiod
    Istiod *IstiodConfig `protobuf:"bytes,54,opt,name=istiod,proto3" json:"istiod,omitempty"`
    // Configure the Pilot certificate provider.
    // Currently, two providers are supported: "kubernetes" and "citadel".
    PilotCertProvider string `protobuf:"bytes,56,opt,name=pilotCertProvider,proto3" json:"pilotCertProvider,omitempty"`
    // Configure the policy for validating JWT.
    // Currently, two options are supported: "third-party-jwt" and "first-party-jwt".
    JwtPolicy string `protobuf:"bytes,57,opt,name=jwtPolicy,proto3" json:"jwtPolicy,omitempty"`
    // Specifies the configuration for Security Token Service.
    Sts *STSConfig `protobuf:"bytes,58,opt,name=sts,proto3" json:"sts,omitempty"`
    // Configures the revision this control plane is a part of
    Revision string `protobuf:"bytes,59,opt,name=revision,proto3" json:"revision,omitempty"`
    // Controls whether the in-cluster MTLS key and certs are loaded from the secret volume mounts.
    MountMtlsCerts *protobuf.BoolValue `protobuf:"bytes,60,opt,name=mountMtlsCerts,proto3" json:"mountMtlsCerts,omitempty"`
    // The address of the CA for CSR.
    CaAddress string `protobuf:"bytes,61,opt,name=caAddress,proto3" json:"caAddress,omitempty"`
    // Controls whether one external istiod is enabled.
    ExternalIstiod       *protobuf.BoolValue `protobuf:"bytes,62,opt,name=externalIstiod,proto3" json:"externalIstiod,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type GlobalLoggingConfig struct {
    // Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>
    // The control plane has different scopes depending on component, but can configure default log level across all components
    // If empty, default scope and level will be used as configured in code
    Level                string   `protobuf:"bytes,1,opt,name=level,proto3" json:"level,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type IngressControllerMode int32

const (
    // Unspecified Istio ingress controller.
    IngressControllerMode_UNSPECIFIED IngressControllerMode = 0
    // Selects all Ingress resources, with or without Istio annotation.
    IngressControllerMode_DEFAULT IngressControllerMode = 1
    // Selects only resources with istio annotation.
    IngressControllerMode_STRICT IngressControllerMode = 2
    // No ingress or sync.
    IngressControllerMode_OFF IngressControllerMode = 3
)

type IngressGatewayConfig struct {
    // Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
    AutoscaleEnabled *protobuf.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
    // maxReplicas setting for HorizontalPodAutoscaler.
    AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
    // minReplicas setting for HorizontalPodAutoscaler.
    AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
    // K8s utilization setting for HorizontalPodAutoscaler target.
    //
    // See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
    Cpu           *CPUTargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"` // Deprecated: Do not use.
    CustomService *protobuf.BoolValue         `protobuf:"bytes,6,opt,name=customService,proto3" json:"customService,omitempty"`
    // Controls whether an ingress gateway is enabled.
    Enabled *protobuf.BoolValue `protobuf:"bytes,10,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Environment variables passed to the proxy container.
    Env                      map[string]interface{} `protobuf:"bytes,11,opt,name=env,proto3" json:"env,omitempty"`
    Labels                   map[string]string      `protobuf:"bytes,15,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
    LoadBalancerIP           string                 `protobuf:"bytes,16,opt,name=loadBalancerIP,proto3" json:"loadBalancerIP,omitempty"`
    LoadBalancerSourceRanges []string               `protobuf:"bytes,17,rep,name=loadBalancerSourceRanges,proto3" json:"loadBalancerSourceRanges,omitempty"`
    Name                     string                 `protobuf:"bytes,44,opt,name=name,proto3" json:"name,omitempty"`
    // K8s node selector.
    //
    // See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
    NodeSelector map[string]interface{} `protobuf:"bytes,19,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"` // Deprecated: Do not use.
    // K8s annotations for pods.
    //
    // See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
    PodAnnotations map[string]interface{} `protobuf:"bytes,20,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"` // Deprecated: Do not use.
    // See EgressGatewayConfig.
    PodAntiAffinityLabelSelector []map[string]interface{} `protobuf:"bytes,21,opt,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"` // Deprecated: Do not use.
    // See EgressGatewayConfig.
    PodAntiAffinityTermLabelSelector []map[string]interface{} `protobuf:"bytes,22,opt,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"` // Deprecated: Do not use.
    // Port Configuration for the ingress gateway.
    Ports []*PortsConfig `protobuf:"bytes,23,rep,name=ports,proto3" json:"ports,omitempty"`
    // Number of replicas for the ingress gateway Deployment.
    ReplicaCount uint32 `protobuf:"varint,24,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"` // Deprecated: Do not use.
    // K8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Resources map[string]interface{} `protobuf:"bytes,25,opt,name=resources,proto3" json:"resources,omitempty"` // Deprecated: Do not use.
    // Config for secret volume mounts.
    SecretVolumes []*SecretVolume `protobuf:"bytes,27,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
    // Annotations to add to the egress gateway service.
    ServiceAnnotations map[string]interface{} `protobuf:"bytes,28,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
    // Service type.
    //
    // See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
    Type string `protobuf:"bytes,29,opt,name=type,proto3" json:"type,omitempty"`
    // Enables cross-cluster access using SNI matching.
    Zvpn *IngressGatewayZvpnConfig `protobuf:"bytes,30,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
    // K8s rolling update strategy
    RollingMaxSurge *IntOrStringForPB `protobuf:"bytes,31,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"` // Deprecated: Do not use.
    // K8s rolling update strategy
    RollingMaxUnavailable *IntOrStringForPB        `protobuf:"bytes,32,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"` // Deprecated: Do not use.
    ExternalTrafficPolicy string                   `protobuf:"bytes,34,opt,name=externalTrafficPolicy,proto3" json:"externalTrafficPolicy,omitempty"`
    Tolerations           []map[string]interface{} `protobuf:"bytes,35,opt,name=tolerations,proto3" json:"tolerations,omitempty"` // Deprecated: Do not use.
    IngressPorts          []map[string]interface{} `protobuf:"bytes,36,opt,name=ingressPorts,proto3" json:"ingressPorts,omitempty"`
    AdditionalContainers  []map[string]interface{} `protobuf:"bytes,37,opt,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
    ConfigVolumes         []map[string]interface{} `protobuf:"bytes,38,opt,name=configVolumes,proto3" json:"configVolumes,omitempty"`
    RunAsRoot             *protobuf.BoolValue      `protobuf:"bytes,45,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
    XXX_NoUnkeyedLiteral  struct{}                 `json:"-"`
    XXX_unrecognized      []byte                   `json:"-"`
    XXX_sizecache         int32                    `json:"-"`
}

type IngressGatewayZvpnConfig struct {
    // Controls whether ZeroVPN is enabled.
    Enabled              *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    Suffix               string              `protobuf:"bytes,2,opt,name=suffix,proto3" json:"suffix,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type IntOrStringForPB struct {
    intstr.IntOrString
}

type IstioOperator struct {
    Kind                 string                      `protobuf:"bytes,5,opt,name=kind,proto3" json:"kind,omitempty"`
    ApiVersion           string                      `protobuf:"bytes,6,opt,name=apiVersion,proto3" json:"apiVersion,omitempty"`
    Spec                 *v1alpha1.IstioOperatorSpec `protobuf:"bytes,7,opt,name=spec,proto3" json:"spec,omitempty"`
    Status               *v1alpha1.InstallStatus     `protobuf:"bytes,8,opt,name=status,proto3" json:"status,omitempty"`
    v11.ObjectMeta       `json:"metadata,omitempty" protobuf:"bytes,9,opt,name=metadata"`
    v11.TypeMeta         `json:",inline"`
    Placeholder          string   `protobuf:"bytes,111,opt,name=placeholder,proto3" json:"placeholder,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type IstioOperatorList struct {
    v1.TypeMeta `json:",inline"`
    v1.ListMeta `json:"metadata,omitempty"`
    Items       []IstioOperator `json:"items"`
}

type IstiodConfig struct {
    // If enabled, istiod will perform config analysis
    EnableAnalysis       *protobuf.BoolValue `protobuf:"bytes,2,opt,name=enableAnalysis,proto3" json:"enableAnalysis,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type IstiodRemoteConfig struct {
    // URL to use for sidecar injector webhook.
    InjectionURL         string   `protobuf:"bytes,1,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type MultiClusterConfig struct {
    // Enables the connection between two kubernetes clusters via their respective ingressgateway services.
    // Use if the pods in each cluster cannot directly talk to one another.
    Enabled              *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    ClusterName          string              `protobuf:"bytes,2,opt,name=clusterName,proto3" json:"clusterName,omitempty"`
    GlobalDomainSuffix   string              `protobuf:"bytes,3,opt,name=globalDomainSuffix,proto3" json:"globalDomainSuffix,omitempty"`
    IncludeEnvoyFilter   *protobuf.BoolValue `protobuf:"bytes,4,opt,name=includeEnvoyFilter,proto3" json:"includeEnvoyFilter,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type OutboundTrafficPolicyConfig struct {
    Mode                 OutboundTrafficPolicyConfig_Mode `protobuf:"varint,2,opt,name=mode,proto3,enum=v1alpha1.OutboundTrafficPolicyConfig_Mode" json:"mode,omitempty"`
    XXX_NoUnkeyedLiteral struct{}                         `json:"-"`
    XXX_unrecognized     []byte                           `json:"-"`
    XXX_sizecache        int32                            `json:"-"`
}

type OutboundTrafficPolicyConfig_Mode int32

const (
    // Outbound traffic to unknown destinations will be allowed, in case there are no services or ServiceEntries for the destination port
    OutboundTrafficPolicyConfig_ALLOW_ANY OutboundTrafficPolicyConfig_Mode = 0
    // Restrict outbound traffic to services defined in the service registry as well as those defined through ServiceEntries
    OutboundTrafficPolicyConfig_REGISTRY_ONLY OutboundTrafficPolicyConfig_Mode = 1
)

type PilotConfig struct {
    // Controls whether Pilot is enabled.
    Enabled *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Controls whether a HorizontalPodAutoscaler is installed for Pilot.
    AutoscaleEnabled *protobuf.BoolValue `protobuf:"bytes,2,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
    // Minimum number of replicas in the HorizontalPodAutoscaler for Pilot.
    AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
    // Maximum number of replicas in the HorizontalPodAutoscaler for Pilot.
    AutoscaleMax uint32 `protobuf:"varint,4,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
    // Number of replicas in the Pilot Deployment.
    ReplicaCount uint32 `protobuf:"varint,5,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"` // Deprecated: Do not use.
    // Image name used for Pilot.
    //
    // This can be set either to image name if hub is also set, or can be set to the full hub:name string.
    //
    // Examples: custom-pilot, docker.io/someuser:custom-pilot
    Image string `protobuf:"bytes,6,opt,name=image,proto3" json:"image,omitempty"`
    // Trace sampling fraction.
    //
    // Used to set the fraction of time that traces are sampled. Higher values are more accurate but add CPU overhead.
    //
    // Allowed values: 0.0 to 1.0
    TraceSampling float64 `protobuf:"fixed64,8,opt,name=traceSampling,proto3" json:"traceSampling,omitempty"`
    // K8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Resources *Resources `protobuf:"bytes,9,opt,name=resources,proto3" json:"resources,omitempty"` // Deprecated: Do not use.
    // Namespace that the configuration management feature is installed into, if different from Pilot namespace.
    ConfigNamespace string `protobuf:"bytes,10,opt,name=configNamespace,proto3" json:"configNamespace,omitempty"`
    // Target CPU utilization used in HorizontalPodAutoscaler.
    //
    // See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
    Cpu *CPUTargetUtilizationConfig `protobuf:"bytes,11,opt,name=cpu,proto3" json:"cpu,omitempty"` // Deprecated: Do not use.
    // K8s node selector.
    //
    // See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
    NodeSelector map[string]interface{} `protobuf:"bytes,12,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"` // Deprecated: Do not use.
    // Maximum duration that a sidecar can be connected to a pilot.
    //
    // This setting balances out load across pilot instances, but adds some resource overhead.
    //
    // Examples: 300s, 30m, 1h
    KeepaliveMaxServerConnectionAge *types.Duration `protobuf:"bytes,13,opt,name=keepaliveMaxServerConnectionAge,proto3" json:"keepaliveMaxServerConnectionAge,omitempty"`
    // Labels that are added to Pilot pods.
    //
    // See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
    DeploymentLabels map[string]interface{} `protobuf:"bytes,14,opt,name=deploymentLabels,proto3" json:"deploymentLabels,omitempty"`
    // Configuration settings passed to Pilot as a ConfigMap.
    //
    // This controls whether the mesh config map, generated from values.yaml is generated.
    // If false, pilot wil use default values or user-supplied values, in that order of preference.
    ConfigMap *protobuf.BoolValue `protobuf:"bytes,18,opt,name=configMap,proto3" json:"configMap,omitempty"`
    // Controls whether Pilot is configured through the Mesh Control Protocol (MCP).
    //
    // If set to true, Pilot requires an MCP server (like Galley) to be installed.
    UseMCP *protobuf.BoolValue `protobuf:"bytes,20,opt,name=useMCP,proto3" json:"useMCP,omitempty"`
    // Environment variables passed to the Pilot container.
    //
    // Examples:
    // env:
    //   ENV_VAR_1: value1
    //   ENV_VAR_2: value2
    Env map[string]interface{} `protobuf:"bytes,21,opt,name=env,proto3" json:"env,omitempty"`
    // K8s rolling update strategy
    RollingMaxSurge *IntOrStringForPB `protobuf:"bytes,24,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"` // Deprecated: Do not use.
    // K8s rolling update strategy
    RollingMaxUnavailable *IntOrStringForPB `protobuf:"bytes,25,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"` // Deprecated: Do not use.
    //
    Tolerations []map[string]interface{} `protobuf:"bytes,26,opt,name=tolerations,proto3" json:"tolerations,omitempty"` // Deprecated: Do not use.
    // if protocol sniffing is enabled for outbound
    EnableProtocolSniffingForOutbound *protobuf.BoolValue `protobuf:"bytes,28,opt,name=enableProtocolSniffingForOutbound,proto3" json:"enableProtocolSniffingForOutbound,omitempty"`
    // if protocol sniffing is enabled for inbound
    EnableProtocolSniffingForInbound *protobuf.BoolValue `protobuf:"bytes,29,opt,name=enableProtocolSniffingForInbound,proto3" json:"enableProtocolSniffingForInbound,omitempty"`
    // K8s annotations for pods.
    //
    // See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
    PodAnnotations map[string]interface{} `protobuf:"bytes,30,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"` // Deprecated: Do not use.
    // ConfigSource describes a source of configuration data for networking
    // rules, and other Istio configuration artifacts. Multiple data sources
    // can be configured for a single control plane.
    ConfigSource            *PilotConfigSource `protobuf:"bytes,31,opt,name=configSource,proto3" json:"configSource,omitempty"`
    JwksResolverExtraRootCA string             `protobuf:"bytes,32,opt,name=jwksResolverExtraRootCA,proto3" json:"jwksResolverExtraRootCA,omitempty"`
    Plugins                 []string           `protobuf:"bytes,33,opt,name=plugins,proto3" json:"plugins,omitempty"`
    Hub                     string             `protobuf:"bytes,34,opt,name=hub,proto3" json:"hub,omitempty"`
    Tag                     interface{}        `protobuf:"bytes,35,opt,name=tag,proto3" json:"tag,omitempty"`
    XXX_NoUnkeyedLiteral    struct{}           `json:"-"`
    XXX_unrecognized        []byte             `json:"-"`
    XXX_sizecache           int32              `json:"-"`
}

type PilotConfigSource struct {
    // Describes the source of configuration, if nothing is specified default is MCP.
    SubscribedResources  []string `protobuf:"bytes,1,rep,name=subscribedResources,proto3" json:"subscribedResources,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type PilotIngressConfig struct {
    // Sets the type ingress service for Pilot.
    //
    // If empty, node-port is assumed.
    //
    // Allowed values: node-port, istio-ingressgateway, ingress
    IngressService        string                `protobuf:"bytes,1,opt,name=ingressService,proto3" json:"ingressService,omitempty"`
    IngressControllerMode IngressControllerMode `protobuf:"varint,2,opt,name=ingressControllerMode,proto3,enum=v1alpha1.IngressControllerMode" json:"ingressControllerMode,omitempty"`
    // If mode is STRICT, this value must be set on "kubernetes.io/ingress.class" annotation to activate.
    IngressClass         string   `protobuf:"bytes,3,opt,name=ingressClass,proto3" json:"ingressClass,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type PilotPolicyConfig struct {
    // Controls whether Istio policy is applied to Pilot.
    Enabled              *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type PortsConfig struct {
    // Port name.
    Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
    // Port number.
    Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
    // NodePort number.
    NodePort int32 `protobuf:"varint,3,opt,name=nodePort,proto3" json:"nodePort,omitempty"`
    // Target port number.
    TargetPort int32 `protobuf:"varint,4,opt,name=targetPort,proto3" json:"targetPort,omitempty"`
    // Protocol name.
    Protocol             string   `protobuf:"bytes,5,opt,name=protocol,proto3" json:"protocol,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type ProxyConfig struct {
    AutoInject string `protobuf:"bytes,4,opt,name=autoInject,proto3" json:"autoInject,omitempty"`
    // Domain for the cluster, default: "cluster.local".
    //
    // K8s allows this to be customized, see https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/
    ClusterDomain string `protobuf:"bytes,5,opt,name=clusterDomain,proto3" json:"clusterDomain,omitempty"`
    // Per Component log level for proxy, applies to gateways and sidecars.
    //
    // If a component level is not set, then the global "logLevel" will be used. If left empty, "misc:error" is used.
    ComponentLogLevel string `protobuf:"bytes,6,opt,name=componentLogLevel,proto3" json:"componentLogLevel,omitempty"`
    // Enables core dumps for newly injected sidecars.
    //
    // If set, newly injected sidecars will have core dumps enabled.
    EnableCoreDump *protobuf.BoolValue `protobuf:"bytes,9,opt,name=enableCoreDump,proto3" json:"enableCoreDump,omitempty"`
    // Specifies the Istio ingress ports not to capture.
    ExcludeInboundPorts string `protobuf:"bytes,12,opt,name=excludeInboundPorts,proto3" json:"excludeInboundPorts,omitempty"`
    // Lists the excluded IP ranges of Istio egress traffic that the sidecar captures.
    ExcludeIPRanges string `protobuf:"bytes,13,opt,name=excludeIPRanges,proto3" json:"excludeIPRanges,omitempty"`
    // Image name or path for the proxy, default: "proxyv2".
    //
    // If registry or tag are not specified, global.hub and global.tag are used.
    //
    // Examples: my-proxy (uses global.hub/tag), docker.io/myrepo/my-proxy:v1.0.0
    Image string `protobuf:"bytes,14,opt,name=image,proto3" json:"image,omitempty"`
    // Lists the IP ranges of Istio egress traffic that the sidecar captures.
    //
    // Example: "172.30.0.0/16,172.20.0.0/16"
    // This would only capture egress traffic on those two IP Ranges, all other outbound traffic would # be allowed by the sidecar."
    IncludeIPRanges string `protobuf:"bytes,16,opt,name=includeIPRanges,proto3" json:"includeIPRanges,omitempty"`
    // Log level for proxy, applies to gateways and sidecars. If left empty, "warning" is used. Expected values are: trace\|debug\|info\|warning\|error\|critical\|off
    LogLevel string `protobuf:"bytes,18,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
    // Enables privileged securityContext for the istio-proxy container.
    //
    // See https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
    Privileged *protobuf.BoolValue `protobuf:"bytes,19,opt,name=privileged,proto3" json:"privileged,omitempty"`
    // Sets the initial delay for readiness probes in seconds.
    ReadinessInitialDelaySeconds uint32 `protobuf:"varint,20,opt,name=readinessInitialDelaySeconds,proto3" json:"readinessInitialDelaySeconds,omitempty"`
    // Sets the interval between readiness probes in seconds.
    ReadinessPeriodSeconds uint32 `protobuf:"varint,21,opt,name=readinessPeriodSeconds,proto3" json:"readinessPeriodSeconds,omitempty"`
    // Sets the number of successive failed probes before indicating readiness failure.
    ReadinessFailureThreshold uint32 `protobuf:"varint,22,opt,name=readinessFailureThreshold,proto3" json:"readinessFailureThreshold,omitempty"`
    // Default port used for the Pilot agent's health checks.
    StatusPort uint32 `protobuf:"varint,23,opt,name=statusPort,proto3" json:"statusPort,omitempty"`
    // K8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Resources            *Resources             `protobuf:"bytes,24,opt,name=resources,proto3" json:"resources,omitempty"` // Deprecated: Do not use.
    Tracer               Tracer                 `protobuf:"varint,25,opt,name=tracer,proto3,enum=v1alpha1.Tracer" json:"tracer,omitempty"`
    ExcludeOutboundPorts string                 `protobuf:"bytes,28,opt,name=excludeOutboundPorts,proto3" json:"excludeOutboundPorts,omitempty"`
    Lifecycle            map[string]interface{} `protobuf:"bytes,36,opt,name=lifecycle,proto3" json:"lifecycle,omitempty"`
    // Controls if sidecar is injected at the front of the container list and blocks the start of the other containers until the proxy is ready
    //
    // Deprecated: replaced by ProxyConfig setting which allows per-pod configuration of this behavior.
    HoldApplicationUntilProxyStarts *protobuf.BoolValue `protobuf:"bytes,37,opt,name=holdApplicationUntilProxyStarts,proto3" json:"holdApplicationUntilProxyStarts,omitempty"` // Deprecated: Do not use.
    XXX_NoUnkeyedLiteral            struct{}            `json:"-"`
    XXX_unrecognized                []byte              `json:"-"`
    XXX_sizecache                   int32               `json:"-"`
}

type ProxyInitConfig struct {
    // Specifies the image for the proxy_init container.
    Image string `protobuf:"bytes,1,opt,name=image,proto3" json:"image,omitempty"`
    // K8s resources settings.
    //
    // See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
    Resources            *Resources `protobuf:"bytes,5,opt,name=resources,proto3" json:"resources,omitempty"` // Deprecated: Do not use.
    XXX_NoUnkeyedLiteral struct{}   `json:"-"`
    XXX_unrecognized     []byte     `json:"-"`
    XXX_sizecache        int32      `json:"-"`
}

type Resources struct {
    Limits               map[string]string `protobuf:"bytes,1,rep,name=limits,proto3" json:"limits,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
    Requests             map[string]string `protobuf:"bytes,2,rep,name=requests,proto3" json:"requests,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
    XXX_NoUnkeyedLiteral struct{}          `json:"-"`
    XXX_unrecognized     []byte            `json:"-"`
    XXX_sizecache        int32             `json:"-"`
}

type ResourcesRequestsConfig struct {
    Cpu                  string   `protobuf:"bytes,1,opt,name=cpu,proto3" json:"cpu,omitempty"`
    Memory               string   `protobuf:"bytes,2,opt,name=memory,proto3" json:"memory,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type SDSConfig struct {
    Token                map[string]interface{} `protobuf:"bytes,5,opt,name=token,proto3" json:"token,omitempty"` // Deprecated: Do not use.
    XXX_NoUnkeyedLiteral struct{}               `json:"-"`
    XXX_unrecognized     []byte                 `json:"-"`
    XXX_sizecache        int32                  `json:"-"`
}

type STSConfig struct {
    ServicePort          uint32   `protobuf:"varint,1,opt,name=servicePort,proto3" json:"servicePort,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type SecretVolume struct {
    MountPath            string   `protobuf:"bytes,1,opt,name=mountPath,proto3" json:"mountPath,omitempty"`
    Name                 string   `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
    SecretName           string   `protobuf:"bytes,3,opt,name=secretName,proto3" json:"secretName,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

type ServiceConfig struct {
    Annotations          map[string]interface{} `protobuf:"bytes,1,opt,name=annotations,proto3" json:"annotations,omitempty"`
    ExternalPort         uint32                 `protobuf:"varint,2,opt,name=externalPort,proto3" json:"externalPort,omitempty"`
    Name                 string                 `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
    Type                 string                 `protobuf:"bytes,18,opt,name=type,proto3" json:"type,omitempty"`
    XXX_NoUnkeyedLiteral struct{}               `json:"-"`
    XXX_unrecognized     []byte                 `json:"-"`
    XXX_sizecache        int32                  `json:"-"`
}

type SidecarInjectorConfig struct {
    // Enables sidecar auto-injection in namespaces by default.
    EnableNamespacesByDefault *protobuf.BoolValue `protobuf:"bytes,2,opt,name=enableNamespacesByDefault,proto3" json:"enableNamespacesByDefault,omitempty"`
    // Instructs Istio to not inject the sidecar on those pods, based on labels that are present in those pods.
    //
    // Annotations in the pods have higher precedence than the label selectors.
    // Order of evaluation: Pod Annotations → NeverInjectSelector → AlwaysInjectSelector → Default Policy.
    // See https://istio.io/docs/setup/kubernetes/additional-setup/sidecar-injection/#more-control-adding-exceptions
    NeverInjectSelector []map[string]interface{} `protobuf:"bytes,11,opt,name=neverInjectSelector,proto3" json:"neverInjectSelector,omitempty"`
    // See NeverInjectSelector.
    AlwaysInjectSelector []map[string]interface{} `protobuf:"bytes,12,opt,name=alwaysInjectSelector,proto3" json:"alwaysInjectSelector,omitempty"`
    //  If true, webhook or istioctl injector will rewrite PodSpec for liveness health check to redirect request to sidecar. This makes liveness check work even when mTLS is enabled.
    RewriteAppHTTPProbe *protobuf.BoolValue `protobuf:"bytes,16,opt,name=rewriteAppHTTPProbe,proto3" json:"rewriteAppHTTPProbe,omitempty"`
    // injectedAnnotations are additional annotations that will be added to the pod spec after injection
    // This is primarily to support PSP annotations.
    InjectedAnnotations map[string]interface{} `protobuf:"bytes,19,opt,name=injectedAnnotations,proto3" json:"injectedAnnotations,omitempty"`
    // Enable objectSelector to filter out pods with no need for sidecar before calling istio-sidecar-injector.
    ObjectSelector map[string]interface{} `protobuf:"bytes,21,opt,name=objectSelector,proto3" json:"objectSelector,omitempty"`
    // Configure the injection url for sidecar injector webhook
    InjectionURL string `protobuf:"bytes,22,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
    // Templates defines a set of custom injection templates that can be used. For example, defining:
    //
    // templates:
    //   hello: |
    //     metadata:
    //       labels:
    //         hello: world
    //
    // Then starting a pod with the `inject.istio.io/templates: hello` annotation, will result in the pod
    // being injected with the hello=world labels.
    // This is intended for advanced configuration only; most users should use the built in template
    Templates map[string]interface{} `protobuf:"bytes,23,opt,name=templates,proto3" json:"templates,omitempty"`
    // defaultTemplates: ["sidecar", "hello"]
    DefaultTemplates []string `protobuf:"bytes,24,rep,name=defaultTemplates,proto3" json:"defaultTemplates,omitempty"`
    // If enabled, the legacy webhook selection logic will be used. This relies on filtering of webhook
    // requests in Istiod, rather than at the webhook selection level.
    // This is option is intended for migration purposes only and will be removed in Istio 1.10.
    UseLegacySelectors   *protobuf.BoolValue `protobuf:"bytes,4,opt,name=useLegacySelectors,proto3" json:"useLegacySelectors,omitempty"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

type TelemetryConfig struct {
    // Controls whether telemetry is exported for Pilot.
    Enabled *protobuf.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Use telemetry v2.
    V2                   *TelemetryV2Config `protobuf:"bytes,3,opt,name=v2,proto3" json:"v2,omitempty"`
    XXX_NoUnkeyedLiteral struct{}           `json:"-"`
    XXX_unrecognized     []byte             `json:"-"`
    XXX_sizecache        int32              `json:"-"`
}