* update installer sha.

* update vfs.

* update testdata.

* Support Operator e2e

* Support Operator e2e

* Load Images for kind nodes

* Load Images for kind nodes

* Load Images for kind nodes

* Load Images for kind nodes

* Review Comments

* Review Comments

* Update readme for controller local debugging

* Address comment

As per YAML specifications, YAML documents should begin with `---`
and conclude with `...`. Kubernetes accepts pretty sloppy yaml and
just requires a `---` although other tools, such as `yq` require
properly formatted YAML in order to operate correctly.

…io#469)

* auto on and make run demo

* make run-build

* run with container BUILD_WITH_CONTAINER=1 make gen

* WIP: Refine e2e implementation

This is a refinement based upon the prior PRs in this area.

Depends-On: istio/tools#483

* Use proper image with jq

* Update to latest common-files

* Address reviewer comments.

* Turn off DNS certificate provisioning

* Run "make gen" and include the changes

* make gen after unset hub and tag

* Update README

* Updates

* Comments

* Remove local build instructions

* Add instructions for local running

* Remove redundant readme

* update sha for installer to include automtls change

* make gen with container build

* manual update the default.yaml, ci not failing dueo to configmap

* change default.yaml

* refresh golden

* fix licenses

* update go mod file

* update hub and tag to use istio.io/pkg DockerBuildInfo

* add ldflags tests for hub and tag

* set if condition to check unknow string instead of empty string

* update go.mod go.sum

* fix lint error

* run make gen to update go.sum

* add licenses update

* Add remote profile

* Update assets

…, tolerations: '[] ->') output (istio#486)

* Prune citadel secrets

* Add istio.io/dns-key-and-cert into secret map

* Add statsv2 install option

* Address comment

* Address comment

* Add make gen update

* Turn off DNS certificate provisioning

* make update-goldens

* make gen-check

* Update installer.sha

…s. (istio#476)

* Exclude the overridden values when comparing the old with the new ones.

* Add --show-overrides flag to show all changed values.

* Fix lint. Remove unused recursive params. Reorder flags.

* Remove empty lines between imports.

* Fix lint, reording imports.

* Move genOverlayICPS() to a better place, reducing imports in upgrade.go.

* Use the untranslated input as a mask

* Improve isPathInTree() func based on PR comments.

* Renaming test struct with more readable fields.

* Remove --show--overrides as it is a common use case to have seprate flag, and we already have method (profile diff) to archieve it.

* Use the existing name.GetFromTreePath() instead of duplicating tree traversals.

* Fix rebasing parameter change.

* Improve tests, and fix a bug for not matching the leaf path from overrides.

* Fix cryptic messages.

* Improve the command examples.

* use force flag for set override

* Update test

* fix conflict

* Match CRD files in istio/istio

* add a newline

* add gen files

…lot endpoints. (istio#635)

This patch allows you to override global.remotePilotAddress for remote clusters.
See istio#19639 for a full issue write-up.
Fixes istio#19639

* xds: use typedstruct

Signed-off-by: Kuat Yessenov <kuat@google.com>

* change indent

Signed-off-by: Kuat Yessenov <kuat@google.com>

* update translate config

* fix test and address comment

* fix lint

* Set CNI namespace as kube-system

Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>

* Fix test failure issues

This patch sets `SilenceUsage` to true.

Currently mesh command always outputs usage when it fails and makes
difficult to find the main error message.

Major change here is a new panel added to mesh dashboard and galley
metrics name fixes

* Fixes for istiod injection

Right now there is no way to remove the sidecar injector deployment when
using istiod. This means you will always have a bunch of config that is
unused. Instead, when istiod is enabled, remove the injector stuff.

Alternative approach would be to add an explicit flag for this, like
istiod.disableinjector or something, but I am not sure that is needed at
this time.

Additionally, add back features from the old injection to avoid
regressions. These are critical features, not just legacy junk.

Finally, reuse the old name for the configmap so existing tooling like
istioctl can continue to function correctly.

* Fix tests

* Fix pilot readiness probe

Not sure why this is defined here, it is a duplicate of installer...

* gen

* Sync installer

I was going to wait for the repo merge, but I wanted to fix any failing
tests that may pop up to make that merge smoother

* fix e2e

* add issue link to the ObjectMeta marshalling.

* fix test.

* limit cni in kube-system

Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>

* keep configurable

* Migrate code to use IstioOperator API in istio/api

* Fix manifest generation

* Prometheus test case

* Refactor addons and gateways

* Add gateway indexing

* Fix remaining tests

* Fix controller test

* Update profiles with new CR headers

* Update readme

* Fix dependency processing

* Add passthrough for values to gateways

* Add addon name field

* More test fixes

* Add default gateway override test case

* More test fixes

* Update goldens

* Lint

* Make gen

* Update goldens

* Fix mandiff

* Fix remaining mandiff profiles

* Update goldens

* Fix addon status

* Remove lingering references to IstioControlPlane

* Make gen

* Update fields to refer to istiooperator

* Update to v1alpha1

* Change CRD meta to plural

* Remove lingering v1alpha2, icp references

* Move CR back to istio-system

* Rename local vars from icp to iop

* Change deployment filenames back to v1alpha2 since tests expect it

* Make gen

* attempt to fix test

Co-authored-by: John Howard <howardjohn@google.com>

…tio#645)

* Mount Citadel CA cert to data plane and config istiod CA provider

* Change the mount path

* Remove an environmental variable

* Support customized labels for istio-ingress

Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>

* update istio-egress

* fix iop status update issue.

* fix lint.

* update status with instance upadter.

* add back the status subresource.

* move status out of spec.

* remove dynamic rest mapper from openshift.

* fix tests.