apiVersion: install.istio.io/v1alpha1 kind: IstioOperator metadata: name: telecom-platform-istio namespace: istio-system spec: profile: default components: base: enabled: true pilot: enabled: true k8s: env: PILOT_TRACE_SAMPLING: "100" ingressGateways: - name: istio-ingressgateway enabled: true k8s: service: type: LoadBalancer ports: - name: http2 port: 80 targetPort: 8080 - name: https port: 443 targetPort: 8443 resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi egressGateways: - name: istio-egressgateway enabled: true k8s: resources: requests: cpu: 50m memory: 64Mi limits: cpu: 200m memory: 256Mi meshConfig: defaultConfig: trafficPolicy: connectionPool: tcp: maxConnections: 100 http: http1MaxPendingRequests: 50 maxRequestsPerConnection: 10 loadBalancer: simple: ROUND_ROBIN accessLogFile: /dev/stdout accessLogEncoding: JSON accessLogFormat: '{"source":"%SOURCE_WORKLOAD%","destination":"%DESTINATION_WORKLOAD%","protocol":"%REQ(:)%","method":"%REQ(:METHOD)%","path":"%REQ(:PATH)%","code":"%RESPONSE_CODE%","duration":"%DURATION%","bytesSent":"%BYTES_SENT%","bytesReceived":"%BYTES_RECEIVED%"}' tracing: sampling: 100.0 zipkin: address: zipkin.istio-system:9411 values: global: controlPlaneSecurityEnabled: true mtls: enabled: true gateways: istio-ingressgateway: type: LoadBalancer autoscaleMin: 1 autoscaleMax: 5 resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi pilot: autoscaleMin: 1 autoscaleMax: 3 resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi