global:
  proxy:
    # Enable proxy to write access log to /dev/stdout.
    accessLogFile: "/dev/stdout"
    autoInject: disabled
  disablePolicyChecks: true

sidecarInjectorWebhook:
  enabled: true
  enableNamespacesByDefault: true

gateways:
  istio-ingressgateway:
    enabled: true
    sds:
      enabled: true
    replicaCount: 2
    autoscaleMin: 2
    autoscaleMax: 4
    resources:
      limits:
        cpu: 3000m
        memory: 2048Mi
      requests:
        cpu: 3000m
        memory: 2048Mi
    ports:
    - name: status-port
      port: 15020
    - name: http2
      port: 80
    - port: 443
      name: https
  cluster-local-gateway:
    enabled: true
    labels:
      app: cluster-local-gateway
      istio: cluster-local-gateway
    replicaCount: 2
    autoscaleMin: 2
    autoscaleMax: 4
    resources: {}
    cpu:
      targetAverageUtilization: 80
    loadBalancerIP: ""
    loadBalancerSourceRanges: {}
    externalIPs: []
    serviceAnnotations: {}
    podAnnotations: {}
    type: ClusterIP
    ports:
    - name: status-port
      port: 15020
    - name: http2
      port: 80
    - name: https
      port: 443
    secretVolumes:
    - name: cluster-local-gateway-certs
      secretName: istio-cluster-local-gateway-certs
      mountPath: /etc/istio/cluster-local-gateway-certs
    - name: cluster-local-gateway-ca-certs
      secretName: istio-cluster-local-gateway-ca-certs
      mountPath: /etc/istio/cluster-local-gateway-ca-certs

prometheus:
  enabled: false

mixer:
  adapters:
    prometheus:
      enabled: false

pilot:
  traceSampling: 100
  autoscaleMin: 2
  resources:
    requests:
      cpu: 3000m
      memory: 2048Mi
