apiVersion: operators.coreos.com/v1alpha1
kind: ClusterServiceVersion
metadata:
  annotations:
    olm.skipRange: '>=1.0.2 <2.1.0-0'
    certified: 'false'
    olm.targetNamespaces: ''
    operatorframework.io/properties: >-
      {"properties":[{"type":"olm.gvk","value":{"group":"maistra.io","kind":"ServiceMeshControlPlane","version":"v1"}},{"type":"olm.gvk","value":{"group":"maistra.io","kind":"ServiceMeshControlPlane","version":"v2"}},{"type":"olm.gvk","value":{"group":"maistra.io","kind":"ServiceMeshMember","version":"v1"}},{"type":"olm.gvk","value":{"group":"maistra.io","kind":"ServiceMeshMemberRoll","version":"v1"}},{"type":"olm.package","value":{"packageName":"servicemeshoperator","version":"2.1.0-0"}}]}
    repository: 'https://github.com/maistra/istio-operator'
    support: 'Red Hat, Inc.'
    operators.openshift.io/infrastructure-features: '["Disconnected"]'
    alm-examples: |-
      [
        {
          "apiVersion": "maistra.io/v2",
          "kind": "ServiceMeshControlPlane",
          "metadata": {
            "name": "basic",
            "namespace": "control-plane-namespace"
          },
          "spec": {
            "version": "v2.0",
            "tracing": {
              "type": "Jaeger",
              "sampling": 10000
            },
            "policy": {
               "type": "Istiod"
            },
            "telemetry": {
               "type": "Istiod"
            },
            "addons": {
              "jaeger": {
                "install": {
                  "storage": {
                    "type": "Memory"
                  }
                }
              },
              "prometheus": {
                "enabled": true
              },
              "kiali": {
                "enabled": true
              },
              "grafana": {
                "enabled": true
              }
            }
          }
        },
        {
          "apiVersion": "maistra.io/v1",
          "kind": "ServiceMeshMemberRoll",
          "metadata": {
            "name": "default",
            "namespace": "control-plane-namespace"
          },
          "spec": {
            "members": [
              "your-project",
              "another-of-your-projects" 
            ]
          }
        },
        {
          "apiVersion": "maistra.io/v1",
          "kind": "ServiceMeshMember",
          "metadata": {
            "name": "default",
            "namespace": "application-namespace"
          },
          "spec": {
            "controlPlaneRef": {
              "name": "basic",
              "namespace": "control-plane-namespace"
            }
          }
        }
      ]
    capabilities: Seamless Upgrades
    olm.operatorNamespace: openshift-operators
    containerImage: >-
      quay.io/maistra/istio-rhel8-operator@sha256:911d42f68065071ee07b03ab2262e2ac0d0723dbaa3c9ebb6f810a1fdbfe94fa
    createdAt: '2021-03-30T10:38:31CEST'
    categories: 'OpenShift Optional, Integration & Delivery'
    description: >-
      The OpenShift Service Mesh Operator enables you to install, configure, and
      manage an instance of Red Hat OpenShift Service Mesh. OpenShift Service
      Mesh is based on the open source Istio project.
    olm.operatorGroup: global-operators
  resourceVersion: '103810'
  name: servicemeshoperator.v2.1.0
  uid: b71fbb7d-8f6a-43f5-b4bb-460d8e9c64f6
  creationTimestamp: '2021-06-03T13:56:30Z'
  generation: 1
  managedFields:
    - apiVersion: operators.coreos.com/v1alpha1
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:operators.openshift.io/infrastructure-features': {}
            'f:createdAt': {}
            'f:alm-examples': {}
            'f:description': {}
            'f:capabilities': {}
            'f:olm.skipRange': {}
            .: {}
            'f:containerImage': {}
            'f:categories': {}
            'f:certified': {}
            'f:operatorframework.io/properties': {}
            'f:support': {}
            'f:repository': {}
        'f:spec':
          'f:version': {}
          'f:maturity': {}
          'f:provider':
            .: {}
            'f:name': {}
          'f:links': {}
          'f:install':
            .: {}
            'f:spec':
              .: {}
              'f:clusterPermissions': {}
              'f:deployments': {}
            'f:strategy': {}
          'f:maintainers': {}
          'f:description': {}
          'f:installModes': {}
          'f:icon': {}
          'f:customresourcedefinitions':
            .: {}
            'f:owned': {}
          .: {}
          'f:relatedImages': {}
          'f:cleanup':
            .: {}
            'f:enabled': {}
          'f:apiservicedefinitions': {}
          'f:displayName': {}
          'f:keywords': {}
      manager: catalog
      operation: Update
      time: '2021-06-03T13:56:30Z'
    - apiVersion: operators.coreos.com/v1alpha1
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:olm.operatorGroup': {}
            'f:olm.operatorNamespace': {}
            'f:olm.targetNamespaces': {}
          'f:labels':
            .: {}
            'f:olm.api.12da4dd9bf15fceb': {}
            'f:olm.api.362f21bbb2de66a0': {}
            'f:olm.api.542a393f6dfeda9f': {}
            'f:operators.coreos.com/servicemeshoperator.openshift-operators': {}
        'f:status':
          'f:lastUpdateTime': {}
          'f:requirementStatus': {}
          'f:phase': {}
          'f:lastTransitionTime': {}
          'f:conditions': {}
          .: {}
          'f:cleanup': {}
          'f:message': {}
          'f:reason': {}
      manager: olm
      operation: Update
      time: '2021-06-03T13:56:31Z'
  namespace: openshift-operators
  labels:
    olm.api.12da4dd9bf15fceb: provided
    olm.api.362f21bbb2de66a0: provided
    olm.api.542a393f6dfeda9f: provided
    operators.coreos.com/servicemeshoperator.openshift-operators: ''
spec:
  customresourcedefinitions:
    owned:
      - description: An Istio control plane installation
        displayName: Istio Service Mesh Control Plane
        kind: ServiceMeshControlPlane
        name: servicemeshcontrolplanes.maistra.io
        specDescriptors:
          - description: Specify the version of the control plane you want to install
            displayName: Control Plane Version
            path: version
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:General'
              - 'urn:alm:descriptor:com.tectonic.ui:select:v2.0'
              - 'urn:alm:descriptor:com.tectonic.ui:select:v1.1'
              - 'urn:alm:descriptor:com.tectonic.ui:select:v1.0'
          - description: Enable mTLS for communication between control plane components
            displayName: Control Plane Security
            path: security.controlPlane.mtls
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:General'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: Set to true to install Prometheus
            displayName: Install Prometheus
            path: addons.prometheus.enabled
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:metrics'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: Enable mTLS for communcation between services in the mesh
            displayName: Data Plane Security
            path: security.dataPlane.mtls
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:General'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: Set to true to install Kiali
            displayName: Install Kiali
            path: addons.kiali.enabled
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:visualization'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: Set to true to install Grafana
            displayName: Install Grafana
            path: addons.grafana.enabled
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:visualization'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: Select the provider to use for tracing
            displayName: Tracing provider
            path: tracing.type
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:tracing'
              - 'urn:alm:descriptor:com.tectonic.ui:select:None'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Jaeger'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Stackdriver'
          - description: >-
              Set storage type for Jaeger (applies only when Jaeger is selected
              as the tracing provider)
            displayName: Jaeger Storage Type
            path: addons.jaeger.install.storage.type
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:tracing'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Memory'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Elasticsearch'
          - description: >-
              Select "Mixer" when deploying a control plane version less than
              "v2.0" or when planning to install 3scale adapter
            displayName: Type of Policy
            path: policy.type
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:Policy'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Istiod'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Mixer'
          - description: >-
              Set to true to install the Istio 3Scale adapter (applies only when
              Policy type is set to Mixer)
            displayName: Install 3Scale Adapter
            path: addons.3scale.enabled
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:Policy'
              - 'urn:alm:descriptor:com.tectonic.ui:booleanSwitch'
          - description: >-
              Select "Mixer" when deploying a control plane version less than
              "v2.0"
            displayName: Type of Telemetry
            path: telemetry.type
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:fieldGroup:Telemetry'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Istiod'
              - 'urn:alm:descriptor:com.tectonic.ui:select:Mixer'
          - description: >-
              Set the default compute resource requests and limits for control
              plane components
            displayName: Default Resource Requirements
            path: runtime.defaults.container.resources
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:resourceRequirements'
              - 'urn:alm:descriptor:com.tectonic.ui:advanced'
        statusDescriptors:
          - description: >-
              Status of components deployed by this ServiceMeshControlPlane
              resource
            displayName: Components
            path: readiness.components
            x-descriptors:
              - 'urn:alm:descriptor:com.tectonic.ui:podStatuses'
        version: v2
      - description: >-
          Marks the containing namespace as a member of the referenced Service
          Mesh
        displayName: Istio Service Mesh Member
        kind: ServiceMeshMember
        name: servicemeshmembers.maistra.io
        specDescriptors:
          - description: >-
              The namespace of the ServiceMeshControlPlane to which this
              namespace belongs
            displayName: Namespace
            path: controlPlaneRef.namespace
            x-descriptors:
              - >-
                urn:alm:descriptor:com.tectonic.ui:fieldGroup:Service_Mesh_Control_Plane
              - 'urn:alm:descriptor:io.kubernetes:Project'
          - description: >-
              The name of the ServiceMeshControlPlane to which this namespace
              belongs
            displayName: Name
            path: controlPlaneRef.name
            x-descriptors:
              - >-
                urn:alm:descriptor:com.tectonic.ui:fieldGroup:Service_Mesh_Control_Plane
              - 'urn:alm:descriptor:com.tectonic.ui:text'
        version: v1
      - description: A list of namespaces in Service Mesh
        displayName: Istio Service Mesh Member Roll
        kind: ServiceMeshMemberRoll
        name: servicemeshmemberrolls.maistra.io
        version: v1
  relatedImages:
    - image: >-
        registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:ee8585c2eae863b76e9d4e8e79e3608e642dc3d1ff71a007ef55aa8fe3f11610
      name: v1_0.3scale-istio-adapter
    - image: >-
        registry.redhat.io/openshift-service-mesh/citadel-rhel8@sha256:812b01b38300a2f0e9537c96f48caa22a49b5ddd436230f6ae2742dc91673cfa
      name: v1_0.citadel
    - image: >-
        registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:6312d3d5242bd60182a596453d9ccbfe36bf4144b9442bc5871001dbf1231c79
      name: v1_0.cni
    - image: >-
        registry.redhat.io/openshift-service-mesh/galley-rhel8@sha256:b8f6562583ce68eb3819f25a43e82e1570173c8374c874d280da81f72dd296f5
      name: v1_0.galley
    - image: >-
        registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:497bebd338d9c18871482e77e89470ece48d525e027a2d1a4ed971bd525c89cd
      name: v1_0.grafana
    - image: >-
        registry.redhat.io/openshift-service-mesh/mixer-rhel8@sha256:2fb223a02a72f721acd75311510a954479275605edc9602c04a4f574486fdd6e
      name: v1_0.mixer
    - image: >-
        registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:0622a302ad88755421967733651786c23146c79236e0801f837c692eb14ad6b9
      name: v1_0.pilot
    - image: >-
        registry.redhat.io/openshift-service-mesh/prometheus-rhel8@sha256:6c32e8db039dd06429a0e71919e7d2b914baf8e28d35ca17e6c9e40179a0871f
      name: v1_0.prometheus
    - image: >-
        registry.redhat.io/openshift-service-mesh/proxy-init-rhel7@sha256:f965d1eb6e9139bfbf55b8e14fcd5cb28619cd89b6576b45aa33ae6211bc0963
      name: v1_0.proxy-init
    - image: >-
        registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:6f8df84d1c20842ec1c31fd3171de8f4601b2a99ab77bae93c242763772971b7
      name: v1_0.proxyv2
    - image: >-
        registry.redhat.io/openshift-service-mesh/sidecar-injector-rhel8@sha256:baee6083db8c87d66035b3297b075e00c01b31b6701c25ec72ca438553e923dc
      name: v1_0.sidecar-injector
    - image: >-
        registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:ee8585c2eae863b76e9d4e8e79e3608e642dc3d1ff71a007ef55aa8fe3f11610
      name: v1_1.3scale-istio-adapter
    - image: >-
        quay.io/maistra/citadel-rhel8@sha256:d8cd29f9d55e464ca2c21dd27c31c5a640d56f096ed0e94e6d816aa6c1b21c7b
      name: v1_1.citadel
    - image: >-
        quay.io/maistra/istio-cni-rhel8@sha256:43a7498187804ac6a920850d211544732ab71484edd81665802021cfc6c8ba5e
      name: v1_1.cni
    - image: >-
        quay.io/maistra/galley-rhel8@sha256:13ee6b4db074ab97a330b7b261b35412a28a1954ff35ddd7d01dcfd57a86bf40
      name: v1_1.galley
    - image: >-
        quay.io/maistra/grafana-rhel8@sha256:3d45ca4aa2b10c5cdb70e9741e7bec3c27563dbfcddcb4ce8f5630f1b9d807d5
      name: v1_1.grafana
    - image: >-
        quay.io/maistra/ior-rhel8@sha256:e9eefa428ac53ad58abe64c52409e6021434744884070ec8c53452e6367f60b0
      name: v1_1.ior
    - image: >-
        quay.io/maistra/mixer-rhel8@sha256:95dd7991899bf7a48633aabb62bb9b049e7c869af040fb3e7bc49a879f1aacdd
      name: v1_1.mixer
    - image: >-
        quay.io/maistra/pilot-rhel8@sha256:c86c710f462b1243e0c47ecc6c8ba4e3077420c41555f53c065116f67d039a69
      name: v1_1.pilot
    - image: >-
        quay.io/maistra/prometheus-rhel8@sha256:1f037e3b63df45dc3c769f58865dbf0ad46c672f80acdeb740b78871d80a4497
      name: v1_1.prometheus
    - image: >-
        quay.io/maistra/proxy-init-rhel7@sha256:0b267a248ebde10627069a28b282f7d184017ef53adfbb2d80bf5f74dc7d8f86
      name: v1_1.proxy-init
    - image: >-
        quay.io/maistra/proxyv2-rhel8@sha256:0d0cef4530f7e6df8287e7828f10db6c819acf8d129d48a93f91893f74e3a25e
      name: v1_1.proxyv2
    - image: >-
        quay.io/maistra/sidecar-injector-rhel8@sha256:0b3a87469a39375f2d69cd934dfdcc64a786ab0dc7b5656c2cc3392398bac33f
      name: v1_1.sidecar-injector
    - image: >-
        quay.io/maistra/3scale-istio-adapter-rhel8@sha256:7adabe1845fdd23be1cdb8df2a5ad1c83607a83ec51ee3860cfe37e6558dcbc8
      name: v2_0.3scale-istio-adapter
    - image: >-
        quay.io/maistra/istio-cni-rhel8@sha256:630ec11db21d4e715b5f442d7a28eaaad4dde4348ba95e0a9fed0de73e904ee1
      name: v2_0.cni
    - image: >-
        quay.io/maistra/grafana-rhel8@sha256:92868759ad56d18115c217148e2280dcb887d22af374af75ec392d7587df4660
      name: v2_0.grafana
    - image: >-
        quay.io/maistra/mixer-rhel8@sha256:ea148be0b57ae92205f18240463de4280c81e0cd6847dfcbd8a4ec8f3b59a573
      name: v2_0.mixer
    - image: >-
        quay.io/maistra/pilot-rhel8@sha256:20acb698f317586209dba3b1389c755fe0b36cc0abd19a6053a85c49c55fa38d
      name: v2_0.pilot
    - image: >-
        quay.io/maistra/prometheus-rhel8@sha256:a4ffcd385dfd1177a2f8783af3fbd38e6cdc051763be156c7f639424102da28b
      name: v2_0.prometheus
    - image: >-
        quay.io/maistra/proxy-init-rhel7@sha256:40d89cc1af2b61fa9990c8c30e75231d56289c47a14e55490cd2ec9f523f3404
      name: v2_0.proxy-init
    - image: >-
        quay.io/maistra/proxyv2-rhel8@sha256:b60dffd792b7857633db90489da793232bb5213339bbf5ee77dd92e2c0a5cf24
      name: v2_0.proxyv2
    - image: >-
        quay.io/maistra/pilot-rhel8@sha256:20acb698f317586209dba3b1389c755fe0b36cc0abd19a6053a85c49c55fa38d
      name: v2_0.wasm-cacher
    - image: >-
        quay.io/maistra/3scale-istio-adapter-rhel8@sha256:7adabe1845fdd23be1cdb8df2a5ad1c83607a83ec51ee3860cfe37e6558dcbc8
      name: v2_1.3scale-istio-adapter
    - image: >-
        quay.io/maistra/istio-cni-rhel8@sha256:fd3180cd42bda251867b0b82e1c15602d20c2d2b32f1613230ae72f8eea98d61
      name: v2_1.cni
    - image: >-
        quay.io/maistra/grafana-rhel8@sha256:234c55a319f5cd58b4dabfeab0dfec6fffa2258f331df1c5d140a90efd2384cd
      name: v2_1.grafana
    - image: 'registry.redhat.io/openshift-service-mesh/mixer-rhel8:2.1.0'
      name: v2_1.mixer
    - image: >-
        quay.io/maistra/pilot-rhel8@sha256:d02b9132e1a19fd36044f294033a2b67fb35e280442c6435194399f8484a0b35
      name: v2_1.pilot
    - image: >-
        quay.io/maistra/prometheus-rhel8@sha256:205cf9a7045d70f6bf343416f8851857861804d09401a241372e2a2b89420668
      name: v2_1.prometheus
    - image: 'registry.redhat.io/openshift-service-mesh/proxy-init-rhel7:2.1.0'
      name: v2_1.proxy-init
    - image: >-
        quay.io/maistra/proxyv2-rhel8@sha256:0bc9cc212deff4d1bca8f8063b8dd555ab87d94f9354aad8495d3dac97f4b2fc
      name: v2_1.proxyv2
    - image: >-
        quay.io/maistra/pilot-rhel8@sha256:d02b9132e1a19fd36044f294033a2b67fb35e280442c6435194399f8484a0b35
      name: v2_1.wasm-cacher
  cleanup:
    enabled: false
  apiservicedefinitions: {}
  keywords:
    - istio
    - maistra
    - servicemesh
  displayName: Red Hat OpenShift Service Mesh
  provider:
    name: 'Red Hat, Inc.'
  maturity: alpha
  installModes:
    - supported: false
      type: OwnNamespace
    - supported: false
      type: SingleNamespace
    - supported: false
      type: MultiNamespace
    - supported: true
      type: AllNamespaces
  version: 2.1.0-0
  icon:
    - base64data: >-
        iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAABmJLR0QA/wD/AP+gvaeTAAAACXBI

        WXMAAA3XAAAN1wFCKJt4AAAAB3RJTUUH5AcOFRI6t+uQ7QAAET5JREFUeNrtnXt0VNW9xz97nzOT

        yQsQFFTkpUYggQB5gAjXooIKVMuy1bvAq9fetrqs7ye2Pq5KrfWBCq0P7nUtS7X2FoutaIv2SmFV

        kSshhACDiIEEsFgwhpD3vM6+fySEDHMmz5k5ZybnuxasJPM6cz7f/du//Tv77C1IMSkQB4oZQ4hc

        BGOUYDQwEjgNGAIMQeBB4QYy217WiMCPogX4BvgGwREUB4WiSsE+IflsZAmVAlQqnS+R7F/g4HSG

        G0FmGDBDKIqBCUB2nD6uHtihFCUSNgqDjSPLOOQYIIGqnIWHRmYBc4XicuA8iw/pcwFrDYP3g3Vs

        yKnA5xggxvLm4c5K41IluQb4DjDApod6TME7QrGqGv5aVErAMUAftHcaOdLgB0JxAzAsyYLVYSX4

        vYT/GlWC1zFAD7S/kJkKFiOYnwp5CrBRCJ4aWcJ7dksibXNyFYj9U1mAwSPAZFJTWxU8PnoLa+xi

        BFsYoKqIuQiWoCikf2iLMnhozFY+6NcG2FfEWAlLgfn0T30o4a6RW9jZrwxwqJAMv2AJcDug078V

        UPC87uLREZtoTnkD7C9mtlKsAM7GUUdVYHDT6K38LSUN0FbAeVQo7gOkw9s8F1bw32mKu84spSll

        DLCvgHwpeRPIcxh3a0S0QwoWJqJ+EPeWWFnEQin5xIHfo1Y5USlKKgv596Q1gLoabX8Rzwt4kxNX

        3Rx1X+lC8OuqYp5VceQUly7Am4c7w8PrQnCNwzEmfcIfVTaLxmygxfYGOJJHVnM6qxVc6pCLqdYH

        NBbkfEqdbQ2wbxrDZIi/AAUOr7jE69Kgj3nnbueI7XKAyvMZLUN87MCPa1dQqLn4+POpTLJVBPhi

        Cqe5ND4CxjqU4qvmEPgMgppk+sQytlhugC+mMcAVYr3T8hMDvznU+rMGPrcgf3w5eyzrArx5uPUQ

        f3DgJxY+QAjSfIrSz8YxxBIDKJCZGbwhYE7K516eDOSAwbaBf1wGZAXS8H4xl7SEG+BAEUtRXN0f

        4A997l2GvbwOOehU28A/rqBiWPNXbEyoAaoKWaTgzv4C31N8Me7zJjPspQ8TaoKu4LebwKDQO5kX

        EpIEtl3Y2QRk9Bf4HeX/opzDP56NUVttC/gdQCq3xpy8MtbFzQCVs/DQwGYBE/sj/ESZoKfw28O5

        oLnFw+nn96Ba2KMuQDTwTH+HD+DOmRS37qC38AEMRXqmr2cTSrptgP3FzAZu6e/w42mCvsA/roBB

        oXcS98TUAIcKyVCKV0jyOfrCk8FpT67CPXZK5GPpmQxd9pduwY+HCWIBv90E8GTZZAbFLAeoKmIp

        cHfSt+6l7+CZOhujvpbDt16Kf1dJp68Z+VEjwhOZ6x6cNRCjsc5WLf9kuSQbJm7joj5HgKoCxgO3

        JX9oX4Nn6uzWL509iGG/+ivu3GLLjy0e8Nu6glk7JnV9Sb7rLkDyHOBKevjFl4R/LRuYIF7wj0vB

        630yQFURc4HLUw2+HUwQb/gAQcXQXVNY3CsDKBAKHktV+FaaIBHwO3QFD6tOcr2oBtg/lQUCilMZ

        vhUmSCR8gJAic1c+P4n2ePTbslrv0k1K6UPPov7tFdS/vQKAtInTGbDorojn+bybqXvj2RNGyBqY

        UvA7DAsfUPCk2R3JerSij1L2vkU7bdIMTrntKY7cuyCiJBs4sIfAgT1djnZDR76k6cO3Ui7sR7Zl

        sncXcAtb+VW3ugClul9Jsgr+0OVrSZs0g2EvWXOZNlngtzeKEA91KwfYO40c4DK7w5cZrQuBuXPy

        W6txA4c48DsfEQzbNYXZXRpAhvghNi35ngz/uNpLsjYzgV3gt3d5Bks6NcCWQlwCrk8m+O0mOG8y

        w178X0unbtkZflsUmPrJdNKjGuA0yeXA6ckGv90EY6fYwgR2hN9W25ED/dwX1QBK2e9evu7CbzfB

        uII2E5ziwDczQSg8wrcPA9tm+1xpuyM2Qnx931Xtvw78jwfxFM6KeFrtikfwbd90wtmZAzHqjjrw

        Tx4NGJztzSMrz0tDeB2gdflV263A6dvxf2G/Zy34oenz/HvKadn8oRP2u+4GBC5uA548uQuYiyPL

        4Iu09MQFVbgqMgcwHANY2fKHvLIO97mJmW5pqBOrtUhoXXJdCHIcnBaG/ezBZD39dkJMYCjSP5va

        usq6BAgGmengtL7PDyISYgIFGP7W0cDxLuACB6k9Er4gguyn38Y9JjfeJpgDbSXfqiI+Aabb8WTr

        Z4wm45Lv4im8CP2MUehnnWOaMKmmBlTQfHl+4XIj0iPXqVLBAKqpIepny+xBIMKr4jU1NdTVHo15

        rTyEQKkTV2tdKOru+jaB/Z/H57wK6vLLGSgUyP1FHAOybAX+9JEMuvlnZF5+LUh7rCtZU1PD0aOJ

        qy3oGNTfu4DAvl0xf28BavJ2NHGwgHNDki/sBN8zdTan/eKt1hZoEyUa/gkTKBruvwp/xY6Yv3e2

        mwJpaIy3E/z0C69k2PK1DvzjGbuQuEaPi0++EeIiicEYu5xo15hcTl3yBmi6Ax+QQuBf8RCNcZq1

        pBSTpBKMssvJHnzf8m5f9OkP8AMrHqbp/d/F7TNCgvN0WjdVtL7fL5wVdRav8rdQv+pFmv62mlNu

        f5q0yZFli2+euJGWEvNb49NnzGPwfb+MHM5t+oCap35s+poWQyJeMN/QI7js7pjfGp7xyGsEhRYG

        v/H9N+N70kMM1wUMtcPmNZmXLTTvA5vqOXLLHHw7P239vcV8FfVQzWGC/9gX5THzdRVVS6Ppa46P

        86PNEfZ7SwhWfxXT75+lWmfvJww+oARZUoEt5lF5LjC/FFG7/P52+Mle5Olu2E8E/LZiUJoELJ9D

        JVxu9KFnmYb+hj//JmXgD1h0J/rwKBulBAMJhd9mALfEBmv9yFOGRlTcAIKHD6JamlKm5evjCxmw

        fC2us86JeKzuoUUJhd9WDJIScNshApgq4E+5sB8UGtnLIk0Qj0JPlzUGhbCFAayUFX1+UEhTEyRa

        CoStt2zTBg/jlFt/EfY310jzaQtZ86/Hk29+UVOPUklrGT2RjKXvRe0Dg1H+PvCxlb2KTuKM0REm

        qL9zHoGDFdZF36oimoB0K0Hrw89m+J/29psiT5ih43zVr4scQEnATz+TXeADBBBkP/curlGJX2lf

        ilYDNDrwrVVQSAY+/KoVHx2SQI0D31q5jSC1Dy60JABJoNqBbzH8W2YTPPylFTmAT7ezAUI1h6l7

        8/nwbP87P8A1InIk0PDeSgJVn5m/T/6FHBs+1iQBM2B39F1XguOnhU3Tan9dRTkEfT0/4aPz8HtO

        TE1zGQGO3nQRoW/+adUpbtCBA3Y1gFFbTd3Kp8L+5im62NQATevfpvnva0zH+Wk3ZoGJAURjPdU/

        XRT18wf+0XxkcuzpW3t1MWjwktchb3qHlj/HSvgIyZdSKKpSNezb9XYtK8N+WJ1FsUeiqHTgxxCu

        yTrEYd2HEeDoTbMsh986DqRcorHLgR87DXh0JVlX/cj0Mf+2jdRa2+eHSWmslyNLqITYbkfan8O+

        0jS06x4g++rImUYNq1+xDXwBKreEctm2dtxOB34MTaAUctE9piawizRBvQCltx4wJULY8PYwlzti

        AoX0mF+6CY4Yi5pwAR6zru7U0zFM39+FZ1LPv7Y7rxg92pxAqbWbQLv2XrJCIRraFqy0k6Tgs7ZI

        APsLuVoJVll1MH29GGTXIg+AEALjzaXUv/WSrY4rTePxvDL+UwIIo/f7zlktO8MP6w6usc9uO6L1

        v9dbBwLAyDIOQd/2oO3TSfL7UhJ+mAkW3k3WFTfYJCrRnLeVinYDtOUBa606IOPoETCMlITf3s1h

        dLlFTQITwJ0nSgHtDrDOACoYwKirSVn4rZM+rsC/12sXA6yOMECwjg3AMasOqrtz/6PB14RAF5j+

        04T53fxSyqiv0WX0FQB0Gf2zxEmfpSuDujvnEajabZvxv/Lz4onI1KacCnyVRbxj1VKxzR+9S/rM

        +b1u+aE1r1L32pOmjw26eQnMibzertcfpfq6QtPXZHzrSvQ7njMZPglqFkSfzDlklZeAntYOv/6u

        +QQO2Ofue11SkbedhsguABDKuqFg09/XdJoMJjrsZ37/p+bhMxTo3om2Ifw2xmF32oQZYFQ2HwBf

        WXFgoeqvqF/9svXwpWTIE7/FNyDKHgSVu5IWvgSjLoOl4clpR3dsIFhZzG+E6nynqXip7rWfk3XF

        98O2bukufH3UWDJnX23eakfkmFcC3WntrxHpGehj8tD+5QoCWvRd8hr/Z3nnJ/noEWqfuNF28AE0

        jU8v2ERzRE2go9qWjNmDRXsGpM/8NkOXvgNS2i7bd39ziOofXdi5AXQ3RtCeE60zdC4ZtzV8c2nt

        5Cc9/xU1d57JVLBm4cjggT0ofwvNOYW2gq8JqLv/uxj1nR+TMuy5YLBL8M+8bdxq0i2YVWbC+4lE

        6/Cvn6Fuwxr7wJcS37J7oq4/kAzSBE9FGRaaq6qIUqAg4cPBDpd0s753M65F92Blm9KVQdPjN9BS

        /knSwtcFjRPLyTbbNq6znUMftxI+QMMfXqZ2UT566To0kehWL3Bt/5ij1xcmNfw2yEvN4NNVore/

        iE8VTLUCfuSRCtJnzCNj7iLE6aMgIxvlSjNdV6BXMgyErxlqj+DbuJaGP72Kak7+m6Y0QVN+a+s3

        emyAygIuE5L3LYfvqNfywP2523kmarvq6g2qivgzMM+Bn5R9/6H8coZ30T10EUIM7iBOdxA78OPc

        9+v8Wzfyg841YisVCl5w4Cdd6183oZT1fTYAgO7iUaDCgZ80WX8gJPheN5/btUZsohmDm4gylHDg

        20tuweIp26jtznN7NIaqLOQFIbjDgW9j+JLNE7YxrQfRovsKHmMxinIHvk1Dv6C5tjlyh/CYGSCn

        Ap+QXEsPl5Vx4MdfApRHZ/7Mz6mPmwEARpXgRXJdd/MBB35i5JIsG9eNrL9POUBHVRXzLIp7HPi2

        SPo2Tyjvfr/fpwjQIRLcL+D3DnxrpQkOtei93/ex1wYQYHytuE4IPnDgWwa/Xg8ysaiUQB849k27

        Z5Dt8bMeRaEDP4HwoUUaTJi4kz4tsRqTa6mHCjnVL/i4OcRYB35ChnvBNI3zx2+ltM/vFYsDOrOU

        ap/kX31G70ORo27DDwjFxbGAH7MIcFzeaeQGWthiKGsXn05Z+NDikkzP28a2GNYPYqs9Ezm7RVIW

        VAxwkMU24ZM6UyaWsjfGpoqtztvBPgxG64J/ONhiI11wOCQ5J9bw42IAgPwdHPXrjNFlbPqp/iy3

        YLNfZ0RBGV/H4/3jPtfWO5kn/AY/URbdaZSsEqDSNJ7OLeOBOH9O/LW7gItbQrxrKOt3KEuSTL9Z

        Sq7ML+PDBBgtMfLmkWW4eD9gMMNBHF0uyU6fxsyi0sQs1pHwsOydzL1+g58rcDm4w7J8vwseyC3n

        +QR3NYnX7hlkBxtY5Vdc7qAHXfCpFmRenjfxu7dYmph587k4JHg9qDizn4I/oikW5m0Pv2W73xjg

        uHZNYbHf4GFDkdlPwn2jS/FYZ3fs9CsDQOsulrumsDho8EBIRd25PbnBS5p0WJa7jQdFDGZYp5QB

        wowwiRuDgodDRue3NSVNZi+o1iTLcsv4mQ3rDfbV9il8SygeDylmGCpyNRNbj+XB0CUlQvBgXhnr

        7HqcSVGdq5yFp6GOxRhcFzQ4265VRQFKl+zVFCtdZ/JMzlp8dj+3SVee9eaRhYvbDbjKgFzDIF1Z

        ePKEoFkTeKVgdTDELydtT66dWJO+Pu8t4FxhcIMBcwzFuJAiO14RQoDSBPVSsFsKPghJVsbjCp1j

        gD6qooDCgGCWMpgUMshBMVwJspTAoxQuAdJQCNW+dD5KCpQCQ7TOuGmRinqlcUhT7BGCcl1jfc4W

        ylLtXP0/aeQGS1ZSYNsAAAAASUVORK5CYII=
      mediatype: image/png
  links:
    - name: Red Hat OpenShift Service Mesh
      url: >-
        https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
    - name: Istio
      url: 'https://istio.io/'
    - name: Operator Source Code
      url: 'https://github.com/Maistra/istio-operator'
    - name: Bugs
      url: 'https://issues.redhat.com/projects/OSSM'
  install:
    spec:
      clusterPermissions:
        - rules:
            - apiGroups:
                - monitoring.coreos.com
              resources:
                - servicemonitors
              verbs:
                - get
                - create
            - apiGroups:
                - ''
              resources:
                - services/finalizers
              verbs:
                - '*'
            - apiGroups:
                - ''
              resources:
                - configmaps
                - endpoints
                - namespaces
                - persistentvolumeclaims
                - pods
                - replicationcontrollers
                - secrets
                - serviceaccounts
                - services
                - events
              verbs:
                - '*'
            - apiGroups:
                - apps
                - extensions
              resources:
                - daemonsets
                - deployments
                - deployments/finalizers
                - ingresses
                - ingresses/status
                - replicasets
                - statefulsets
              verbs:
                - '*'
            - apiGroups:
                - autoscaling
              resources:
                - horizontalpodautoscalers
              verbs:
                - '*'
            - apiGroups:
                - policy
              resources:
                - poddisruptionbudgets
              verbs:
                - '*'
            - apiGroups:
                - admissionregistration.k8s.io
              resources:
                - mutatingwebhookconfigurations
                - validatingwebhookconfigurations
              verbs:
                - '*'
            - apiGroups:
                - apiextensions.k8s.io
              resources:
                - customresourcedefinitions
              verbs:
                - '*'
            - apiGroups:
                - certmanager.k8s.io
              resources:
                - clusterissuers
              verbs:
                - '*'
            - apiGroups:
                - networking.k8s.io
              resources:
                - networkpolicies
              verbs:
                - '*'
            - apiGroups:
                - rbac.authorization.k8s.io
              resources:
                - clusterrolebindings
                - clusterroles
                - rolebindings
                - roles
              verbs:
                - '*'
            - apiGroups:
                - authentication.istio.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - config.istio.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - networking.istio.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - rbac.istio.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - security.istio.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - jaegertracing.io
              resources:
                - jaegers
              verbs:
                - '*'
            - apiGroups:
                - kiali.io
              resources:
                - kialis
              verbs:
                - '*'
            - apiGroups:
                - maistra.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - authentication.maistra.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - rbac.maistra.io
              resources:
                - '*'
              verbs:
                - '*'
            - apiGroups:
                - route.openshift.io
              resources:
                - routes
                - routes/custom-host
              verbs:
                - '*'
            - apiGroups:
                - authorization.k8s.io
              resources:
                - subjectaccessreviews
              verbs:
                - create
            - apiGroups:
                - network.openshift.io
              resources:
                - clusternetworks
              verbs:
                - get
            - apiGroups:
                - config.openshift.io
              resources:
                - networks
              verbs:
                - get
            - apiGroups:
                - image.openshift.io
              resources:
                - imagestreams
              verbs:
                - get
                - list
                - watch
            - apiGroups:
                - network.openshift.io
              resources:
                - netnamespaces
              verbs:
                - get
                - list
                - watch
                - update
            - apiGroups:
                - k8s.cni.cncf.io
              resources:
                - network-attachment-definitions
              verbs:
                - create
                - delete
                - get
                - list
                - patch
                - watch
            - apiGroups:
                - security.openshift.io
              resourceNames:
                - privileged
              resources:
                - securitycontextconstraints
              verbs:
                - use
            - apiGroups:
                - ''
              resources:
                - nodes
                - nodes/proxy
              verbs:
                - get
                - list
                - watch
            - apiGroups:
                - authentication.k8s.io
              resources:
                - tokenreviews
              verbs:
                - create
            - nonResourceURLs:
                - /metrics
              verbs:
                - get
          serviceAccountName: istio-operator
      deployments:
        - name: istio-operator
          spec:
            replicas: 1
            selector:
              matchLabels:
                name: istio-operator
            strategy: {}
            template:
              metadata:
                annotations:
                  oauth-proxy.name: oauth-proxy
                  olm.relatedImage.v1_0.grafana: >-
                    registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:497bebd338d9c18871482e77e89470ece48d525e027a2d1a4ed971bd525c89cd
                  olm.relatedImage.v2_0.grafana: >-
                    quay.io/maistra/grafana-rhel8@sha256:92868759ad56d18115c217148e2280dcb887d22af374af75ec392d7587df4660
                  olm.relatedImage.v1_1.grafana: >-
                    quay.io/maistra/grafana-rhel8@sha256:3d45ca4aa2b10c5cdb70e9741e7bec3c27563dbfcddcb4ce8f5630f1b9d807d5
                  oauth-proxy.tag: v4.4
                  olm.relatedImage.v2_1.grafana: >-
                    quay.io/maistra/grafana-rhel8@sha256:234c55a319f5cd58b4dabfeab0dfec6fffa2258f331df1c5d140a90efd2384cd
                  olm.relatedImage.v1_1.sidecar-injector: >-
                    quay.io/maistra/sidecar-injector-rhel8@sha256:0b3a87469a39375f2d69cd934dfdcc64a786ab0dc7b5656c2cc3392398bac33f
                  oauth-proxy.namespace: openshift
                  olm.relatedImage.v1_0.sidecar-injector: >-
                    registry.redhat.io/openshift-service-mesh/sidecar-injector-rhel8@sha256:baee6083db8c87d66035b3297b075e00c01b31b6701c25ec72ca438553e923dc
                  olm.relatedImage.v1_0.mixer: >-
                    registry.redhat.io/openshift-service-mesh/mixer-rhel8@sha256:2fb223a02a72f721acd75311510a954479275605edc9602c04a4f574486fdd6e
                  olm.relatedImage.v2_0.mixer: >-
                    quay.io/maistra/mixer-rhel8@sha256:ea148be0b57ae92205f18240463de4280c81e0cd6847dfcbd8a4ec8f3b59a573
                  olm.relatedImage.v1_1.mixer: >-
                    quay.io/maistra/mixer-rhel8@sha256:95dd7991899bf7a48633aabb62bb9b049e7c869af040fb3e7bc49a879f1aacdd
                  olm.relatedImage.v1_0.proxyv2: >-
                    registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:6f8df84d1c20842ec1c31fd3171de8f4601b2a99ab77bae93c242763772971b7
                  olm.relatedImage.v2_1.mixer: 'registry.redhat.io/openshift-service-mesh/mixer-rhel8:2.1.0'
                  olm.relatedImage.v2_0.proxyv2: >-
                    quay.io/maistra/proxyv2-rhel8@sha256:b60dffd792b7857633db90489da793232bb5213339bbf5ee77dd92e2c0a5cf24
                  olm.relatedImage.v1_1.proxyv2: >-
                    quay.io/maistra/proxyv2-rhel8@sha256:0d0cef4530f7e6df8287e7828f10db6c819acf8d129d48a93f91893f74e3a25e
                  olm.relatedImage.v2_1.prometheus: >-
                    quay.io/maistra/prometheus-rhel8@sha256:205cf9a7045d70f6bf343416f8851857861804d09401a241372e2a2b89420668
                  olm.relatedImage.v2_1.proxyv2: >-
                    quay.io/maistra/proxyv2-rhel8@sha256:0bc9cc212deff4d1bca8f8063b8dd555ab87d94f9354aad8495d3dac97f4b2fc
                  olm.relatedImage.v1_1.ior: >-
                    quay.io/maistra/ior-rhel8@sha256:e9eefa428ac53ad58abe64c52409e6021434744884070ec8c53452e6367f60b0
                  olm.relatedImage.v1_1.prometheus: >-
                    quay.io/maistra/prometheus-rhel8@sha256:1f037e3b63df45dc3c769f58865dbf0ad46c672f80acdeb740b78871d80a4497
                  olm.relatedImage.v2_0.prometheus: >-
                    quay.io/maistra/prometheus-rhel8@sha256:a4ffcd385dfd1177a2f8783af3fbd38e6cdc051763be156c7f639424102da28b
                  olm.relatedImage.v1_0.prometheus: >-
                    registry.redhat.io/openshift-service-mesh/prometheus-rhel8@sha256:6c32e8db039dd06429a0e71919e7d2b914baf8e28d35ca17e6c9e40179a0871f
                  olm.relatedImage.v1_1.galley: >-
                    quay.io/maistra/galley-rhel8@sha256:13ee6b4db074ab97a330b7b261b35412a28a1954ff35ddd7d01dcfd57a86bf40
                  olm.relatedImage.v2_1.proxy-init: >-
                    registry.redhat.io/openshift-service-mesh/proxy-init-rhel7:2.1.0
                  olm.relatedImage.v1_1.proxy-init: >-
                    quay.io/maistra/proxy-init-rhel7@sha256:0b267a248ebde10627069a28b282f7d184017ef53adfbb2d80bf5f74dc7d8f86
                  olm.relatedImage.v2_0.proxy-init: >-
                    quay.io/maistra/proxy-init-rhel7@sha256:40d89cc1af2b61fa9990c8c30e75231d56289c47a14e55490cd2ec9f523f3404
                  olm.relatedImage.v1_0.galley: >-
                    registry.redhat.io/openshift-service-mesh/galley-rhel8@sha256:b8f6562583ce68eb3819f25a43e82e1570173c8374c874d280da81f72dd296f5
                  olm.relatedImage.v1_0.proxy-init: >-
                    registry.redhat.io/openshift-service-mesh/proxy-init-rhel7@sha256:f965d1eb6e9139bfbf55b8e14fcd5cb28619cd89b6576b45aa33ae6211bc0963
                  oauth-proxy.query: 'true'
                  olm.relatedImage.v1_0.citadel: >-
                    registry.redhat.io/openshift-service-mesh/citadel-rhel8@sha256:812b01b38300a2f0e9537c96f48caa22a49b5ddd436230f6ae2742dc91673cfa
                  olm.relatedImage.v1_0.pilot: >-
                    registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:0622a302ad88755421967733651786c23146c79236e0801f837c692eb14ad6b9
                  olm.relatedImage.v1_1.citadel: >-
                    quay.io/maistra/citadel-rhel8@sha256:d8cd29f9d55e464ca2c21dd27c31c5a640d56f096ed0e94e6d816aa6c1b21c7b
                  olm.relatedImage.v2_0.pilot: >-
                    quay.io/maistra/pilot-rhel8@sha256:20acb698f317586209dba3b1389c755fe0b36cc0abd19a6053a85c49c55fa38d
                  olm.relatedImage.v1_1.pilot: >-
                    quay.io/maistra/pilot-rhel8@sha256:c86c710f462b1243e0c47ecc6c8ba4e3077420c41555f53c065116f67d039a69
                  olm.relatedImage.v2_0.wasm-cacher: >-
                    quay.io/maistra/pilot-rhel8@sha256:20acb698f317586209dba3b1389c755fe0b36cc0abd19a6053a85c49c55fa38d
                  olm.relatedImage.v2_1.pilot: >-
                    quay.io/maistra/pilot-rhel8@sha256:d02b9132e1a19fd36044f294033a2b67fb35e280442c6435194399f8484a0b35
                  olm.relatedImage.v2_1.wasm-cacher: >-
                    quay.io/maistra/pilot-rhel8@sha256:d02b9132e1a19fd36044f294033a2b67fb35e280442c6435194399f8484a0b35
                  olm.relatedImage.v1_0.cni: >-
                    registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:6312d3d5242bd60182a596453d9ccbfe36bf4144b9442bc5871001dbf1231c79
                  olm.relatedImage.v2_1.3scale-istio-adapter: >-
                    quay.io/maistra/3scale-istio-adapter-rhel8@sha256:7adabe1845fdd23be1cdb8df2a5ad1c83607a83ec51ee3860cfe37e6558dcbc8
                  olm.relatedImage.v1_1.3scale-istio-adapter: >-
                    registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:ee8585c2eae863b76e9d4e8e79e3608e642dc3d1ff71a007ef55aa8fe3f11610
                  olm.relatedImage.v2_0.3scale-istio-adapter: >-
                    quay.io/maistra/3scale-istio-adapter-rhel8@sha256:7adabe1845fdd23be1cdb8df2a5ad1c83607a83ec51ee3860cfe37e6558dcbc8
                  olm.relatedImage.v2_0.cni: >-
                    quay.io/maistra/istio-cni-rhel8@sha256:630ec11db21d4e715b5f442d7a28eaaad4dde4348ba95e0a9fed0de73e904ee1
                  olm.relatedImage.v1_1.cni: >-
                    quay.io/maistra/istio-cni-rhel8@sha256:43a7498187804ac6a920850d211544732ab71484edd81665802021cfc6c8ba5e
                  olm.relatedImage.v1_0.3scale-istio-adapter: >-
                    registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:ee8585c2eae863b76e9d4e8e79e3608e642dc3d1ff71a007ef55aa8fe3f11610
                  olm.relatedImage.v2_1.cni: >-
                    quay.io/maistra/istio-cni-rhel8@sha256:fd3180cd42bda251867b0b82e1c15602d20c2d2b32f1613230ae72f8eea98d61
                creationTimestamp: null
                labels:
                  name: istio-operator
              spec:
                containers:
                  - command:
                      - istio-operator
                      - '--config'
                      - /etc/operator/olm/config.properties
                    env:
                      - name: WATCH_NAMESPACE
                      - name: POD_NAME
                        valueFrom:
                          fieldRef:
                            fieldPath: metadata.name
                      - name: OPERATOR_NAME
                        value: istio-operator
                    image: >-
                      quay.io/maistra/istio-rhel8-operator@sha256:911d42f68065071ee07b03ab2262e2ac0d0723dbaa3c9ebb6f810a1fdbfe94fa
                    imagePullPolicy: Always
                    name: istio-operator
                    ports:
                      - containerPort: 11999
                        name: validation
                        protocol: TCP
                      - containerPort: 60000
                        name: metrics
                        protocol: TCP
                    resources: {}
                    volumeMounts:
                      - mountPath: /etc/operator/olm
                        name: operator-olm-config
                        readOnly: true
                      - mountPath: /tmp/k8s-webhook-server/serving-certs
                        name: webhook-tls-volume
                        readOnly: true
                serviceAccountName: istio-operator
                volumes:
                  - downwardAPI:
                      defaultMode: 420
                      items:
                        - fieldRef:
                            fieldPath: metadata.annotations
                          path: config.properties
                    name: operator-olm-config
                  - name: webhook-tls-volume
                    secret:
                      optional: true
                      secretName: maistra-operator-serving-cert
    strategy: deployment
  maintainers:
    - email: istio-feedback@redhat.com
      name: 'Red Hat, OpenShift Service Mesh'
  description: >-
    Red Hat OpenShift Service Mesh is a platform that provides behavioral
    insight and operational control over a service mesh, providing a uniform way
    to connect, secure, and monitor microservice applications.


    ### Overview


    Red Hat OpenShift Service Mesh, based on the open source
    [Istio](https://istio.io/) project, adds a transparent layer on existing

    distributed applications without requiring any changes to the service code.
    You add Red Hat OpenShift Service Mesh

    support to services by deploying a special sidecar proxy throughout your
    environment that intercepts all network

    communication between microservices. You configure and manage the service
    mesh using the control plane features.


    Red Hat OpenShift Service Mesh provides an easy way to create a network of
    deployed services that provides discovery,

    load balancing, service-to-service authentication, failure recovery,
    metrics, and monitoring. A service mesh also

    provides more complex operational functionality, including A/B testing,
    canary releases, rate limiting, access

    control, and end-to-end authentication.


    ### Core Capabilities


    Red Hat OpenShift Service Mesh supports uniform application of a number of
    key capabilities across a network of services:


    + **Traffic Management** - Control the flow of traffic and API calls between
    services, make calls more reliable,
      and make the network more robust in the face of adverse conditions.

    + **Service Identity and Security** - Provide services in the mesh with a
    verifiable identity and provide the
      ability to protect service traffic as it flows over networks of varying degrees of trustworthiness.

    + **Policy Enforcement** - Apply organizational policy to the interaction
    between services, ensure access policies
      are enforced and resources are fairly distributed among consumers. Policy changes are made by configuring the
      mesh, not by changing application code.

    + **Telemetry** - Gain understanding of the dependencies between services
    and the nature and flow of traffic between
      them, providing the ability to quickly identify issues.

    ### Joining Projects Into a Mesh


    Once an instance of Red Hat OpenShift Service Mesh has been installed, it
    will only exercise control over services within its own

    project.  Other projects may be added into the mesh using one of two
    methods:


    1. A **ServiceMeshMember** resource may be created in other projects to add
    those projects into the mesh.  The
      **ServiceMeshMember** specifies a reference to the **ServiceMeshControlPlane** object that was used to install
      the control plane.  The user creating the **ServiceMeshMember** resource must have permission to *use* the
      **ServiceMeshControlPlane** object.  The adminstrator for the project containing the control plane can grant
      individual users or groups the *use* permissions.

    2. A **ServiceMeshMemberRoll** resource may be created in the project
    containing the control plane.  This resource
      contains a single *members* list of all the projects that should belong in the mesh.  The resource must be named
      *default*.  The user creating the resource must have *edit* or *admin* permissions for all projects in the
      *members* list.

    ### More Information


    *
    [Documentation](https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html)

    * [Bugs](https://issues.redhat.com/projects/OSSM)
status:
  cleanup: {}
  conditions:
    - lastTransitionTime: '2021-06-03T13:56:30Z'
      lastUpdateTime: '2021-06-03T13:56:30Z'
      message: requirements not yet checked
      phase: Pending
      reason: RequirementsUnknown
    - lastTransitionTime: '2021-06-03T13:56:30Z'
      lastUpdateTime: '2021-06-03T13:56:30Z'
      message: one or more requirements couldn't be found
      phase: Pending
      reason: RequirementsNotMet
  lastTransitionTime: '2021-06-03T13:56:30Z'
  lastUpdateTime: '2021-06-03T13:56:30Z'
  message: one or more requirements couldn't be found
  phase: Pending
  reason: RequirementsNotMet
  requirementStatus:
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is not present
      name: servicemeshcontrolplanes.maistra.io
      status: NotPresent
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is not present
      name: servicemeshmemberrolls.maistra.io
      status: NotPresent
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is not present
      name: servicemeshmembers.maistra.io
      status: NotPresent
      version: v1
    - group: ''
      kind: ServiceAccount
      message: Service account does not exist
      name: istio-operator
      status: NotPresent
      version: v1
