apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
spec:
  hub: docker.io/istio
  tag: 1.28.1

  components:
    base:
      enabled: true # Istio 基础组件
    pilot:
      enabled: true # Istio 控制平面(Istiod)
    # 进出口流量启用
    ingressGateways:
    - name: istio-ingressgateway
      enabled: true
    egressGateways:
    - name: istio-egressgateway
      enabled: false

  # Most default values come from the helm chart's values.yaml
  # Below are the things that differ
  values:
    defaultRevision: "" # 控制 sidecar 注入的默认版本
    global:
      istioNamespace: istio-system # Istio 安装的命名空间
      configValidation: true # 启用配置验证
    gateways:
      istio-ingressgateway: {}
      istio-egressgateway: {}
    ztunnel:
      resourceName: ztunnel # 为 Ztunnel DaemonSet 指定名称