Repository: kinvolk/lokomotive
Pull request #1086 (2020-10-16 07:37:02)

istio-operator: Update to 1.7.3
Release Notes: https://github.com/istio/istio/releases/tag/1.7.3

- [x] TODO: Add conversion tests.


Patch:
diff --git a/assets/charts/components/istio-operator/Chart.yaml b/assets/charts/components/istio-operator/Chart.yaml
index 15268dae..336a8f1f 100644
--- a/assets/charts/components/istio-operator/Chart.yaml
+++ b/assets/charts/components/istio-operator/Chart.yaml
@@ -1,11 +1,12 @@
 apiVersion: v2
 name: istio-operator
-version: 1.6.0
+version: 1.7.0
+tillerVersion: ">=2.7.2"
 description: Helm chart for deploying Istio operator
 keywords:
-- istio
-- operator
+  - istio
+  - operator
 sources:
-- http://github.com/istio/istio/operator
+  - https://github.com/istio/istio/tree/master/operator
 engine: gotpl
-icon: https://istio.io/favicons/android-192x192.png
+icon: https://istio.io/latest/favicons/android-192x192.png
diff --git a/assets/charts/components/istio-operator/crds/crd-operator.yaml b/assets/charts/components/istio-operator/crds/crd-operator.yaml
index 6b85c37c..05fb86a6 100644
--- a/assets/charts/components/istio-operator/crds/crd-operator.yaml
+++ b/assets/charts/components/istio-operator/crds/crd-operator.yaml
@@ -1,8 +1,10 @@
 # SYNC WITH manifests/charts/base/files
-apiVersion: apiextensions.k8s.io/v1beta1
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   name: istiooperators.install.istio.io
+  labels:
+    release: istio
 spec:
   group: install.istio.io
   names:
@@ -10,37 +12,63 @@ spec:
     plural: istiooperators
     singular: istiooperator
     shortNames:
-    - iop
+      - iop
   scope: Namespaced
-  subresources:
-    status: {}
-  validation:
-    openAPIV3Schema:
-      properties:
-        apiVersion:
-          description: 'APIVersion defines the versioned schema of this representation
-            of an object. Servers should convert recognized schemas to the latest
-            internal value, and may reject unrecognized values.
-            More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#resources'
+  versions:
+    - additionalPrinterColumns:
+        - description: Istio control plane revision
+          jsonPath: .spec.revision
+          name: Revision
           type: string
-        kind:
-          description: 'Kind is a string value representing the REST resource this
-            object represents. Servers may infer this from the endpoint the client
-            submits requests to. Cannot be updated. In CamelCase.
-            More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+        - description: IOP current state
+          jsonPath: .status.status
           type: string
-        spec:
-          description: 'Specification of the desired state of the istio control plane resource.
-            More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
-          type: object
-        status:
-          description: 'Status describes each of istio control plane component status at the current time.
-            0 means NONE, 1 means UPDATING, 2 means HEALTHY, 3 means ERROR, 4 means RECONCILING.
-            More info: https://github.com/istio/api/blob/master/operator/v1alpha1/istio.operator.v1alpha1.pb.html &
-            https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+          name: Status
+        - jsonPath: .metadata.creationTimestamp
+          description:
+            "CreationTimestamp is a timestamp representing the server time when
+            this object was created. It is not guaranteed to be set in happens-before order
+            across separate operations. Clients may not set this value. It is represented
+            in RFC3339 form and is in UTC. Populated by the system. Read-only. Null for
+            lists. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata"
+          name: Age
+          type: date
+      name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          properties:
+            apiVersion:
+              description:
+                "APIVersion defines the versioned schema of this representation
+                of an object. Servers should convert recognized schemas to the latest
+                internal value, and may reject unrecognized values.
+                More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#resources"
+              type: string
+            kind:
+              description:
+                "Kind is a string value representing the REST resource this
+                object represents. Servers may infer this from the endpoint the client
+                submits requests to. Cannot be updated. In CamelCase.
+                More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              type: string
+            spec:
+              description:
+                "Specification of the desired state of the istio control plane resource.
+                More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#spec-and-status"
+              x-kubernetes-preserve-unknown-fields: true
+              type: object
+            status:
+              description:
+                "Status describes each of istio control plane component status at the current time.
+                0 means NONE, 1 means UPDATING, 2 means HEALTHY, 3 means ERROR, 4 means RECONCILING.
+                More info: https://github.com/istio/api/blob/master/operator/v1alpha1/istio.operator.v1alpha1.pb.html &
+                https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#spec-and-status"
+              x-kubernetes-preserve-unknown-fields: true
+              type: object
           type: object
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: true
+      served: true
+      storage: true
+      subresources:
+        status: {}
 ---
+
diff --git a/assets/charts/components/istio-operator/templates/clusterrole.yaml b/assets/charts/components/istio-operator/templates/clusterrole.yaml
index 53be806e..bdbd5bda 100644
--- a/assets/charts/components/istio-operator/templates/clusterrole.yaml
+++ b/assets/charts/components/istio-operator/templates/clusterrole.yaml
@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   creationTimestamp: null
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
 rules:
 # istio groups
 - apiGroups:
@@ -29,12 +29,6 @@ rules:
   - '*'
   verbs:
   - '*'
-- apiGroups:
-  - rbac.istio.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
 - apiGroups:
   - security.istio.io
   resources:
@@ -81,6 +75,7 @@ rules:
   verbs:
   - get
   - create
+  - update
 - apiGroups:
   - policy
   resources:
diff --git a/assets/charts/components/istio-operator/templates/clusterrole_binding.yaml b/assets/charts/components/istio-operator/templates/clusterrole_binding.yaml
index 39e26636..9b9df7da 100644
--- a/assets/charts/components/istio-operator/templates/clusterrole_binding.yaml
+++ b/assets/charts/components/istio-operator/templates/clusterrole_binding.yaml
@@ -1,13 +1,13 @@
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
 subjects:
 - kind: ServiceAccount
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
   namespace: {{.Values.operatorNamespace}}
 roleRef:
   kind: ClusterRole
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
   apiGroup: rbac.authorization.k8s.io
 ---
diff --git a/assets/charts/components/istio-operator/templates/crds.yaml b/assets/charts/components/istio-operator/templates/crds.yaml
new file mode 100644
index 00000000..a3703650
--- /dev/null
+++ b/assets/charts/components/istio-operator/templates/crds.yaml
@@ -0,0 +1,6 @@
+{{- if .Values.enableCRDTemplates -}}
+{{- range $path, $bytes := .Files.Glob "crds/*.yaml" -}}
+---
+{{ $.Files.Get $path }}
+{{- end -}}
+{{- end -}}
diff --git a/assets/charts/components/istio-operator/templates/deployment.yaml b/assets/charts/components/istio-operator/templates/deployment.yaml
index f08307fd..1baaa8df 100644
--- a/assets/charts/components/istio-operator/templates/deployment.yaml
+++ b/assets/charts/components/istio-operator/templates/deployment.yaml
@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   namespace: {{.Values.operatorNamespace}}
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
 spec:
   replicas: 1
   selector:
@@ -13,34 +13,39 @@ spec:
       labels:
         name: istio-operator
     spec:
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 65534
-        runAsGroup: 65534
-      serviceAccountName: istio-operator
+      serviceAccountName: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
       containers:
         - name: istio-operator
           image: {{.Values.hub}}/operator:{{.Values.tag}}
           command:
           - operator
           - server
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+              - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1337
+            runAsUser: 1337
+            runAsNonRoot: true
           imagePullPolicy: IfNotPresent
           resources:
-            limits:
-              cpu: 200m
-              memory: 256Mi
-            requests:
-              cpu: 50m
-              memory: 128Mi
+{{ toYaml .Values.operator.resources | trim | indent 12 }}
           env:
             - name: WATCH_NAMESPACE
-              value: {{.Values.istioNamespace}}
+              value: {{.Values.watchedNamespaces | quote}}
             - name: LEADER_ELECTION_NAMESPACE
-              value: {{.Values.operatorNamespace}}
+              value: {{.Values.operatorNamespace | quote}}
             - name: POD_NAME
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.name
             - name: OPERATOR_NAME
-              value: {{.Values.operatorNamespace}}
+              value: {{.Values.operatorNamespace | quote}}
+            - name: WAIT_FOR_RESOURCES_TIMEOUT
+              value: {{.Values.waitForResourcesTimeout | quote}}
+            - name: REVISION
+              value: {{.Values.revision | quote}}
 ---
diff --git a/assets/charts/components/istio-operator/templates/istio-namespace.yaml b/assets/charts/components/istio-operator/templates/istio-namespace.yaml
new file mode 100644
index 00000000..91ee4c68
--- /dev/null
+++ b/assets/charts/components/istio-operator/templates/istio-namespace.yaml
@@ -0,0 +1,8 @@
+---
+# XXX: Lokomotive specific config
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{.Values.istioNamespace}}
+  labels:
+    lokomotive.kinvolk.io/name: {{.Values.istioNamespace}}
diff --git a/assets/charts/components/istio-operator/templates/istio-operator-cr.yaml b/assets/charts/components/istio-operator/templates/istio-operator-cr.yaml
index 00291b90..e5072436 100644
--- a/assets/charts/components/istio-operator/templates/istio-operator-cr.yaml
+++ b/assets/charts/components/istio-operator/templates/istio-operator-cr.yaml
@@ -1,13 +1,5 @@
 ---
 # XXX: Lokomotive specific config
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{.Values.istioNamespace}}
-  labels:
-    lokomotive.kinvolk.io/name: {{.Values.istioNamespace}}
----
-# XXX: Lokomotive specific config
 apiVersion: install.istio.io/v1alpha1
 kind: IstioOperator
 metadata:
diff --git a/assets/charts/components/istio-operator/templates/namespace.yaml b/assets/charts/components/istio-operator/templates/namespace.yaml
new file mode 100644
index 00000000..31dc5aae
--- /dev/null
+++ b/assets/charts/components/istio-operator/templates/namespace.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{.Values.operatorNamespace}}
+  labels:
+    istio-operator-managed: Reconcile
+    istio-injection: disabled
+---
diff --git a/assets/charts/components/istio-operator/templates/service.yaml b/assets/charts/components/istio-operator/templates/service.yaml
index 93e2638b..e7967a72 100644
--- a/assets/charts/components/istio-operator/templates/service.yaml
+++ b/assets/charts/components/istio-operator/templates/service.yaml
@@ -4,7 +4,7 @@ metadata:
   namespace: {{.Values.operatorNamespace}}
   labels:
     name: istio-operator
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
 spec:
   ports:
   - name: http-metrics
diff --git a/assets/charts/components/istio-operator/templates/service_account.yaml b/assets/charts/components/istio-operator/templates/service_account.yaml
index 32307f32..cb708eee 100644
--- a/assets/charts/components/istio-operator/templates/service_account.yaml
+++ b/assets/charts/components/istio-operator/templates/service_account.yaml
@@ -2,5 +2,5 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   namespace: {{.Values.operatorNamespace}}
-  name: istio-operator
+  name: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
 ---
diff --git a/assets/charts/components/istio-operator/values.yaml b/assets/charts/components/istio-operator/values.yaml
index 35225675..96d80e9c 100644
--- a/assets/charts/components/istio-operator/values.yaml
+++ b/assets/charts/components/istio-operator/values.yaml
@@ -1,8 +1,29 @@
 hub: docker.io/istio
-tag: 1.6.3
+tag: 1.7.3
+
 operatorNamespace: istio-operator
-istioNamespace: istio-system
+
+# Used to replace istioNamespace to support operator watch multiple namespaces.
+watchedNamespaces: istio-system
+waitForResourcesTimeout: 300s
+
+# Used for helm2 to add the CRDs to templates.
+enableCRDTemplates: false
+
+# revision for the operator resources
+revision: ""
+
+# Operator resource defaults
+operator:
+  resources:
+    limits:
+      cpu: 200m
+      memory: 256Mi
+    requests:
+      cpu: 50m
+      memory: 128Mi
 
 # XXX: Lokomotive specific changes
+istioNamespace: istio-system
 istioOperator:
   profile: minimal
diff --git a/pkg/assets/generated_assets.go b/pkg/assets/generated_assets.go
index 98c00f6f..470befbe 100644
--- a/pkg/assets/generated_assets.go
+++ b/pkg/assets/generated_assets.go
@@ -1198,9 +1198,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/istio-operator/Chart.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "Chart.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 249,
+			uncompressedSize: 300,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x44\x8e\x41\x72\xc3\x20\x0c\x45\xf7\x9c\x42\x17\x00\x6a\x2f\x3a\x13\x4e\xd0\x5e\xa0\x7b\x0a\x0a\xd6\xd4\x46\x8c\x50\xdc\xe6\xf6\x1d\x9c\xd6\xd9\xb0\xe0\xbd\xff\x46\xb1\xd1\x07\x4a\x27\xae\x01\xf6\xd9\xd4\xb8\x61\x00\xea\x4a\x6c\xb9\xa1\x44\x65\x31\xfb\xbf\x30\xb9\x57\xf7\x62\x32\xf6\x24\xd4\xf4\xf8\x7a\xc3\x75\x83\xb4\x44\x51\xb8\xb2\x40\xc6\xb6\xf2\x9d\x6a\x81\xf7\xd1\x80\xb3\xf1\x85\xf7\x6f\x96\xdc\x83\xb1\x8f\xbc\xb1\x4f\xd8\xf9\x26\x09\x0f\xb6\xa8\xb6\xe0\x7d\x21\x5d\x6e\x9f\x2e\xf1\xe6\x0f\xfb\xef\x3d\x17\x58\x0b\x55\x0c\x50\x58\xdb\x6a\x28\x8d\x53\xc6\xb4\x07\xff\x50\x1d\xb1\xbf\xc6\x7d\x90\xee\x63\xcd\xc2\x94\xed\x74\x99\x7f\xa6\xcb\xec\x5a\x2d\xe6\x37\x00\x00\xff\xff\x60\x7c\x9e\x06\xf9\x00\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x3c\x8e\xc1\x4e\xc3\x30\x0c\x86\xef\x79\x0a\x6b\xf7\x26\xb4\x97\x69\x91\xe0\x0c\x2f\xc0\x3d\x24\x5e\x6a\x91\xc6\x91\xe3\x15\xf6\xf6\xa8\x65\xeb\xc5\xb2\xec\xff\xfb\xec\xd0\xe8\x13\xa5\x13\x57\x0f\xeb\x64\x6a\x58\xd0\x03\x75\x25\x1e\xb8\xa1\x04\x65\x31\xeb\x33\x30\xda\xb3\x7d\x31\x4a\xa5\xa0\x1c\xd4\xe9\xed\x75\xb2\x67\x3b\x9d\x4c\xc2\x1e\x85\x9a\xee\xe3\x77\x2c\x0b\xc4\x39\x88\xc2\x95\x05\x12\xb6\xc2\x77\xaa\x19\x3e\x36\x39\x1c\xf2\x6f\xbc\xff\xb0\xa4\xee\x0d\xc0\xf0\x7f\x79\xef\x8e\x40\xe7\x9b\x44\x7c\xec\x67\xd5\xd6\xbd\x73\x99\x74\xbe\x7d\xd9\xc8\x8b\xdb\x91\x47\x55\x41\x74\x4b\xe8\x8a\xe2\x0e\x01\xd6\x4c\x15\x3d\x64\xd6\x56\x0c\xc5\xed\xbb\xa7\x67\xc7\x2c\xb1\x2b\x41\xb1\xab\xbb\x86\x75\x0b\x74\x17\x6a\x12\xa6\x34\x8c\x97\xe9\x77\xbc\x4c\xb6\xd5\x6c\xfe\x02\x00\x00\xff\xff\x52\xbb\x88\x70\x2c\x01\x00\x00"),
 		},
 		"/charts/components/istio-operator/crds": &vfsgen۰DirInfo{
 			name:    "crds",
@@ -1209,9 +1209,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/istio-operator/crds/crd-operator.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "crd-operator.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 2086,
+			uncompressedSize: 3282,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xcc\x55\xc1\x8e\xdb\x36\x10\xbd\xfb\x2b\x06\x08\xd0\x5c\x2c\xa9\x6e\x7a\x28\x74\x5b\x38\x46\xd6\x68\xea\x0d\xec\x6d\x8a\x1c\x47\xd4\xd8\x9a\xae\x44\xb2\x9c\xa1\xd1\x6d\xd1\x7f\x2f\x48\xc9\xf6\x7a\x93\x45\xd1\xdb\xea\xc6\x37\xa3\x37\xe4\x7b\xc3\xe1\x1b\xd8\x7d\xd9\x2c\xe1\xb7\xf5\xfd\x2d\x0c\x68\x79\x4f\xa2\x52\x99\x0e\x83\x4a\xd5\xa0\x50\xb5\xe7\x9e\x64\x86\x9e\x3f\x53\x10\x76\xb6\x06\xf4\x4c\x7f\x2a\xd9\xb4\x92\xf2\xe1\x27\x29\xd9\x55\xc7\x45\x43\x8a\x8b\xd9\x03\xdb\xb6\x86\x65\x14\x75\xc3\x96\xc4\xc5\x60\xe8\x3d\xed\xd9\xb2\xb2\xb3\xb3\x81\x14\x5b\x54\xac\x67\x00\x16\x07\xaa\x81\x45\xd9\x39\x4f\x01\xd5\x05\x29\xd9\x8a\x62\xdf\x97\x19\x2e\xd9\xcd\xc4\x93\x49\xd9\x87\xe0\xa2\xaf\xe1\xab\xf8\xc8\x23\x29\x05\x60\xac\xbe\x4e\xb1\xbb\x89\x32\xe3\xbe\x8f\x01\xfb\xe7\xc5\x72\x48\xd8\x1e\x62\x8f\xe1\x59\x70\x8c\x75\x2e\xe8\xe6\x42\x5f\x00\x3b\x3f\x03\x10\xe3\x3c\xd5\x90\x23\x1e\x0d\xb5\x09\x8b\x4d\x98\xce\x3b\x65\x8b\xa2\x46\xa9\xe1\xef\x7f\x66\x00\x47\xec\xb9\xc5\xa4\xc1\x18\x74\x9e\xec\xcd\xa7\xf5\xe7\x77\x3b\xd3\xd1\x80\x23\x08\xe0\x43\xda\x80\xf2\x89\x23\x7d\x4f\xb4\x3f\x63\x00\x2d\x89\x09\xec\x33\x23\xbc\x4d\x54\x63\x0e\xb4\x49\x6d\x12\xd0\x8e\xe0\x38\x62\xd4\x82\xe4\x32\xe0\xf6\xa0\x1d\x0b\x04\xf2\x81\x84\xac\xe6\x2d\x3d\xa1\x85\x94\x82\x16\x5c\xf3\x3b\x19\x2d\x61\x47\x21\x91\x24\x29\x62\xdf\x82\x71\xf6\x48\x41\x21\x90\x71\x07\xcb\x7f\x9d\x99\x05\xd4\xe5\x92\x3d\x2a\x89\x5e\x31\xb2\x55\x0a\x16\xfb\x24\x42\xa4\x39\xa0\x6d\x61\xc0\x47\x08\x94\x6a\x40\xb4\x4f\xd8\x72\x8a\x94\x57\xff\xff\xe2\x02\x01\xdb\xbd\xab\xa1\x53\xf5\x52\x57\xd5\x81\xb5\x8b\x4d\x69\xdc\x50\x3d\xc4\x86\x82\x25\x25\xa9\x8c\x1b\x86\x68\x59\x1f\xab\xa6\x77\x4d\x35\xa0\x28\x85\xca\x38\xab\x81\x9b\x98\x2c\xaf\x5a\x3a\x52\x5f\x09\x1f\x0a\x0c\xa6\x63\x25\xa3\x31\x50\x85\x9e\x8b\x7c\x36\xab\xb9\xab\x87\xf6\xcd\xd9\xcd\xb7\x4f\x36\xa3\x8f\xc9\x78\xd1\xc0\xf6\x70\x86\x73\xd7\xbd\x68\xcd\xcf\x6c\x5b\x60\x01\x9c\x7e\x1b\x8f\x78\x71\x20\x41\x49\xb8\xed\x6a\x77\x0f\xa7\xa2\xd9\xa5\x6b\x5b\xb2\x21\x97\xdf\xe4\xe2\x4d\xd2\x92\xed\x9e\xc2\xe8\xed\x3e\xb8\x21\x33\x92\x6d\xbd\x63\xab\x79\x61\x7a\x26\x7b\xed\x8b\xc4\x66\x60\x4d\xcd\xf0\x47\x4c\xf7\x1e\xd4\x95\xb0\x44\x6b\x9d\x42\x43\x10\x7d\x8b\x4a\x6d\x09\x6b\x0b\x4b\x1c\xa8\x5f\xa2\xd0\x6b\x70\x26\x99\x20\x45\x52\xfd\xbf\xbd\x39\x8d\x8f\x6f\x7b\xb3\xf3\x64\x78\xcf\x26\xdf\x82\xf1\x72\x50\x4a\xe1\x90\x1a\x5b\x51\xe9\x04\xe6\xe1\x00\x79\xc3\xae\x07\xdf\xa3\xa5\xb3\x59\xaf\x41\x93\x74\xce\x02\x6d\x5b\x8c\x53\xe7\x6b\x5d\xc6\xfe\xb9\xe8\x32\x0e\xa7\x97\x95\xc9\xf1\x09\x6c\x48\x80\xd0\x74\x49\x8c\x6f\x09\x61\xdc\xe0\x9d\x25\xab\x13\x2d\xe0\xd4\x73\x31\x84\x84\x2a\x0f\xcf\x44\xfa\x1e\x06\x42\x2b\xb0\xb9\xdb\xac\xe6\xb0\x98\x56\xbf\x7e\x7a\x7f\x73\xbf\xde\x7c\x98\xc3\x0f\x13\x72\xbb\xba\xf9\x78\x7f\xfb\x65\x0e\xef\x26\x60\xb5\xdd\xde\x6d\xe7\xf0\xe3\xb4\xdc\xae\x96\x77\x9b\xe5\xfa\xe3\x7a\xf3\xe1\xff\xb8\x90\x0f\x91\x64\xbc\x92\xfe\x34\xfb\xab\xe3\x02\x7b\xdf\xe1\x62\xcc\x2b\x4f\x78\x79\xc2\x4b\xdf\x94\x9d\x0e\x3d\x7c\x77\x55\xf3\x55\xda\x3d\x3d\x01\xd9\xea\x62\x7a\x73\x4f\xe7\x18\x9f\xa9\x34\x45\xda\x1a\x34\x44\x9a\xde\x2d\x17\xf0\x40\x13\x52\x14\xc5\xec\xdf\x00\x00\x00\xff\xff\x28\xc6\xad\x26\x26\x08\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xdc\x56\x4d\x73\xdc\x36\x0c\xbd\xef\xaf\xc0\x24\x33\x3d\x59\x52\x5d\xf7\xd0\xee\xcd\xa3\xb8\xc9\x4e\xd3\xb5\x67\xed\xa4\x93\x23\x24\x41\x2b\xc6\x14\xc9\x12\xe0\x26\x6e\xa7\xff\xbd\x43\x4a\xda\xef\xb4\xf1\x2d\xd3\xbd\xec\x10\x04\x1e\xc0\x87\x47\x50\x2f\xe1\xfe\xc3\xb2\x84\xdf\x17\x0f\x6f\xa0\x47\xa3\x5a\x62\xe1\xa2\xee\xd0\x0b\x17\x15\x32\x15\xad\xd2\xc4\x33\x74\xea\x3d\x79\x56\xd6\xcc\x01\x9d\xa2\xcf\x42\x26\xae\x38\x7f\xfc\x89\x73\x65\x8b\xcd\xe5\xec\x51\x99\x66\x0e\x65\x60\xb1\xfd\x8a\xd8\x06\x5f\xd3\x2b\x6a\x95\x51\xa2\xac\x99\xf5\x24\xd8\xa0\xe0\x7c\x06\x60\xb0\xa7\x39\x28\x16\x65\xad\x23\x8f\x62\x3d\xe7\xca\xb0\xa0\xd6\x79\x32\xe7\xca\xce\x00\x34\x56\xa4\x39\x46\x00\x78\xd2\x84\x3c\x85\xcd\xd8\x51\x1d\x37\xd6\xde\x06\x37\x87\x33\xc1\x31\xc9\x18\x3b\x94\xb6\x88\x7b\xb7\x63\xbe\x64\x77\x3a\x78\xd4\xc7\x95\xa4\x2d\x56\x66\x1d\x34\xfa\xa3\xcd\x61\xaf\xb3\x5e\x96\x3b\x78\x80\x0c\x94\x75\x33\x00\xae\xad\xa3\x39\xa4\x3d\x87\x35\x35\x33\x80\xcd\x40\xdc\xe8\x9b\x01\x36\x4d\x62\x04\xf5\x9d\x57\x46\xc8\x97\x56\x87\xde\x6c\xb1\xa2\x4f\x43\x5c\x7b\xe5\x24\x11\x9e\xea\x86\xda\x1a\xf1\x56\x83\xd3\x68\x08\x3c\x6d\x54\x44\xdd\xc6\x00\x7c\x64\x6b\xee\x50\xba\x39\xe4\x91\x9c\xfc\x8c\xcb\xc0\xfb\xea\x74\x43\x9e\x62\xd9\x2c\x5e\x99\xf5\x17\xcb\xb8\xbd\x83\x3a\x78\x4f\x46\x80\x05\x85\xbe\x90\x5b\x50\x02\x8f\x7f\xff\x95\x62\x2a\xe9\xfe\xd0\x3b\xdb\x07\x9c\x84\x93\xd7\x9e\x30\x96\xf2\xa0\x7a\x62\xc1\xde\xed\xc1\xec\x57\xba\x67\x06\x78\x51\x1e\x47\x81\x62\x40\x90\xed\xd2\x93\xf3\xc4\x64\x44\x99\x35\x48\x47\xc0\xe4\x37\xe4\x93\x07\x7c\xea\xc8\x1c\xe0\x49\xa7\x18\x6c\xf5\x91\x6a\x81\x4f\xc8\x90\x8a\xa2\x26\x87\x85\x44\x60\x63\x05\xd6\x01\x3d\x1a\x21\x6a\x40\x2c\x54\x11\x50\x40\x19\xe8\xd0\x39\x32\x9c\x55\xd4\x5a\x4f\x60\x7d\x43\xfe\x00\x1b\x6b\x6f\x99\x81\xc9\xa1\x47\x21\x18\x44\x97\xae\x19\x94\x5a\x91\x11\x86\x1e\x9f\x52\x92\x88\x99\x6a\xd9\xa0\x0e\x34\xa5\xdf\x9e\x25\x29\x6f\xf7\x53\x06\x56\xbf\x94\x57\x57\x57\x3f\x43\x6b\x7d\x0f\x68\x9a\xe8\xae\x0c\xbc\x7b\x28\x73\xb8\xb3\x2e\xe8\x78\x0c\xa8\x9e\x06\x0a\x9e\x58\xa8\xcf\x61\x45\xd8\x64\xd6\xe8\xa7\x1c\x96\x41\xeb\x18\x7c\x80\xab\x15\x0b\xe7\xf0\x5b\x3c\x8f\x32\xad\x9d\x43\x27\xe2\x78\x5e\x14\x6b\x25\xd3\x6c\xa8\x6d\xdf\x07\xa3\xe4\xa9\x48\x1a\x56\x55\x88\xb7\xac\x68\x68\x43\xba\x40\xa7\xb2\xda\x9a\x4d\xe4\x3f\x1e\xb4\x6f\x5e\x4e\x0d\x7f\x71\x22\x93\xeb\x35\x9d\x28\xaa\xd9\x29\x71\x70\xda\x5c\xa2\x76\x1d\x5e\x8e\x46\xae\x3b\xea\x71\x27\x0a\xeb\xc8\x5c\xdf\x2d\xde\x5f\xdd\x1f\x6d\x00\x38\x1f\x19\x17\x45\x7c\xa8\xa1\xbd\xe9\x77\x60\xff\x17\xd9\x25\xe9\xc5\x34\x43\x1c\x34\x71\x10\x12\x27\x72\xc7\x81\x40\xcd\x58\x1b\xd8\x76\x68\xe5\xb6\x7b\xa9\xe9\x27\x78\xb6\x05\x34\xa3\xf6\x72\xb8\x4f\x2a\xe5\x38\x8c\x82\x6e\x20\x71\xe8\x05\x3c\xd5\x76\x6d\xd4\x9f\x5b\x74\x8e\x22\x8c\x69\x63\x83\x59\x4e\x50\xd3\x08\x32\xa8\x07\x21\x5d\x24\x69\x44\x91\x79\x4a\x1a\x0f\x66\x0f\x31\xb9\x70\x7e\x82\x71\xbe\xff\x5d\xa8\xf2\xda\xf6\xc5\x63\xa8\xc8\x1b\x12\xe2\x3d\x29\x54\xda\x56\x45\x8f\x2c\xe4\xcf\xc9\x82\xd5\x3a\x43\x5f\x77\x4a\xa8\x96\xe0\xe9\x9c\x4e\xfc\xf8\xc8\xf0\x8b\xa3\x82\xbe\x30\x6a\xc6\x77\xe0\x59\x2d\xfc\x55\x0d\x37\x05\x47\xb8\x81\x82\xd3\x99\xb1\xba\xb9\x7f\x80\xa9\xa0\xd4\xcd\xd3\xf6\x0d\x43\x63\x1b\xca\xbb\x1e\x46\xbe\x95\x69\xe3\xd0\x89\x3a\x68\xbd\xed\x13\x2a\x99\xc6\x59\x65\x24\x2d\xea\x34\x01\x4e\x60\x39\x54\xbd\x92\x28\x9e\x3f\x42\x7c\xbd\x41\x6c\x0e\x25\x9a\x38\x24\x2a\x82\xe0\x9a\x71\x3e\x19\x28\xb1\x27\x5d\x22\xd3\xb7\xd2\xc1\xd8\x28\xce\x62\x57\xbe\xbe\x87\xd3\xc3\xff\xf5\x3d\xbc\x77\x54\xab\x56\xd5\xe9\x56\x0d\x97\x8d\x62\x88\xf2\xf1\x92\x48\x9a\xb4\x83\x51\x9d\x7d\x69\x87\xa6\x7e\x2b\x9c\xc5\xf3\x67\x68\x9a\x6c\x78\x61\x8f\x79\xfb\x9c\xed\x12\x67\x49\x69\x7e\x43\x59\x30\x8f\xc6\x7e\x32\x59\xab\x48\x37\x3c\x07\xf1\x81\xce\x12\x3e\x88\xf4\x90\xf0\x94\xe7\x99\x94\xa7\x98\xd1\xa9\x22\x06\xc2\xba\x8b\x2c\x9f\x63\xb8\xb6\xbd\xb3\x66\xfa\xac\x08\x0c\x38\x0a\x7e\xfc\xd8\x88\x0f\xf1\x29\xfb\xdf\x43\x4f\x68\x18\x96\xb7\xcb\x9b\x0b\xb8\x1c\x57\xef\xee\x5e\x5d\x3f\x2c\x96\xaf\x2f\xe0\x87\xd1\xf2\xe6\xe6\xfa\xed\xc3\x9b\x0f\x17\x70\x35\x1a\x6e\x56\xab\xdb\xd5\x05\xfc\x38\x2e\x57\x37\xe5\xed\xb2\x5c\xbc\x5d\x2c\x5f\x3f\xb7\xc5\xe9\x30\xb1\x47\x07\x7d\x9d\x3e\x15\x8b\xe9\x21\x1a\xfc\xf2\xc9\x9e\x4f\xf6\xdc\x55\x79\x27\xbd\x86\xef\x4e\xf2\xfe\x7f\xf5\x74\xc6\x9c\x20\x9b\x03\x10\x16\xeb\x71\x4d\x87\xb6\x50\x6d\x27\xfe\x4e\x72\xa3\x3a\xe1\xaf\xbf\x67\x59\x96\xcd\x66\xff\x04\x00\x00\xff\xff\xcd\x80\x36\x98\xd2\x0c\x00\x00"),
 		},
 		"/charts/components/istio-operator/templates": &vfsgen۰DirInfo{
 			name:    "templates",
@@ -1220,30 +1220,51 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/istio-operator/templates/clusterrole.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "clusterrole.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 1657,
+			uncompressedSize: 1670,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x55\xcd\x6e\x1b\x3d\x0c\xbc\xef\x53\x08\xc9\x21\xc0\x07\xd8\xc1\x77\x0b\x7c\xed\xa1\xf7\xa2\xe8\x9d\x96\xe8\x0d\x61\x89\x14\x48\xca\x69\xf2\xf4\xc5\xfe\x38\x4d\xb2\x76\x9c\xc2\x37\x89\x18\x0e\x67\x77\x66\xb9\x50\xe9\x17\xaa\x91\xf0\x26\xe8\x16\xe2\x1a\x9a\x3f\x8a\xd2\x0b\x38\x09\xaf\xf7\x0f\xb6\x26\xb9\x3f\xfc\xdf\xed\x89\xd3\x26\x7c\xcb\xcd\x1c\xf5\x87\x64\xec\x0a\x3a\x24\x70\xd8\x74\x21\x44\xc5\xb1\xe1\x27\x15\x34\x87\x52\x37\x81\x5b\xce\x5d\x08\x0c\x05\x37\x81\xcc\x49\x56\x52\x51\xc1\x45\x3b\x6d\x19\x6d\xd3\xdd\x4e\xf5\xd0\xab\xb4\x6a\xdd\x2a\x40\xa5\xef\xe3\x79\xe0\x5c\x85\x41\x0b\xb2\x53\x9c\xc4\x8c\xe0\x35\x49\x17\x82\xa2\x49\xd3\x88\x33\xf0\xee\xbf\xbb\x2e\x84\x03\xea\xf6\x4d\x61\x41\x17\x85\x77\xd4\x5f\x4d\x43\x6c\x0e\x39\x5f\xcd\xc3\xe8\x4f\xa2\x7b\xe2\xeb\x25\x8d\xce\x5d\x4b\x62\x18\x9b\x92\x3f\xff\x2b\xd1\x6d\xd8\x3f\xd8\x79\x0f\x53\x21\x1b\xf2\xa5\xd8\x93\xb9\xbe\xcd\xd5\x72\x40\x69\x0e\x4e\xdc\x3f\xe1\xf6\x51\x64\x3f\x39\xd6\xa6\x26\x1b\x11\x07\xc8\x94\x3e\xc5\x5c\x7a\x4e\xa8\x84\xbf\x1d\x79\x10\x65\x67\x95\xc4\x66\x2e\xe5\x58\x4c\xb8\x23\xa6\x71\xc2\xfa\x4c\xff\x27\x2d\x5f\x12\x55\xa7\xe7\xfb\x4b\xbd\xd4\x94\x00\x8b\xb0\xa1\x4f\xd0\x84\x35\xcb\x73\x41\x5e\xde\xef\x77\xc4\x90\xe9\x05\xd5\xe6\xcc\xf6\x8a\x66\x38\xdd\x14\x6b\xa6\x08\xaf\x44\xe6\xe0\xb8\x6b\x79\x2e\x5c\xd4\xda\x5c\x2c\x42\x26\xee\x97\x1a\xc7\xe5\x21\xec\x90\xab\xa4\x23\x72\x92\x71\x89\xb7\x08\x93\x8b\x0e\x1f\x44\x14\x45\xb1\x75\x94\xb2\x9c\x60\xa8\x07\x8a\x38\xa3\x3f\x10\xf7\xe8\x93\x17\xc3\x42\xc2\xe5\x8c\x2a\x99\xe2\xf3\x92\xb4\x4a\x4a\x64\xda\xea\x60\xd8\xb6\xa5\xfe\x6b\xaf\xe2\xec\xca\x3c\x11\xa8\x69\x75\xaa\x64\xdc\x12\x27\xe2\xde\x3e\xd6\x67\x77\xde\x9d\xde\x60\x2f\x89\xb9\xb9\x39\x31\x75\xfc\x3a\x0a\x1c\xd3\xc5\xa9\x0a\x1d\x03\x83\x87\xd7\xec\x0c\x6b\xda\x2a\xc4\x79\x72\x95\x34\x1f\x86\x9f\x83\x39\xb2\x1f\x24\xb7\x82\x31\x03\x15\x3b\xee\x0b\x7d\x4d\xd0\xe4\xc9\xbb\x0b\xc4\x28\x8d\x4f\xbe\xc6\xd5\xaa\xfb\x13\x00\x00\xff\xff\x0b\x58\x89\x1a\x79\x06\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x55\x3d\x6f\x23\x39\x0c\xed\xe7\x57\x08\x4e\x91\xbb\x03\x3c\xc1\x75\x81\xdb\x2b\xae\x5f\x2c\xd2\xcb\x12\x3d\x21\x2c\x91\x5a\x92\x9a\x6c\x62\xf8\xbf\x2f\xe6\xc3\xd9\x24\x13\xc7\x59\xa4\xa3\xe4\xc7\xc7\x27\xf2\x99\xe3\x0b\xde\x81\x28\x32\x6d\x9c\x6c\x7d\x68\x7d\xb5\x7b\x16\x7c\xf2\x86\x4c\xed\xfe\x56\x5b\xe4\x9b\xfe\xdf\x66\x8f\x14\x37\xee\xbf\x54\xd5\x40\xbe\x71\x82\x26\x83\xf9\xe8\xcd\x6f\x1a\xe7\x82\xc0\x98\xf0\x1d\x33\xa8\xf9\x5c\x36\x8e\x6a\x4a\x8d\x73\xe4\x33\x6c\x1c\xaa\x21\xaf\xb9\x80\x78\x63\x39\x1c\xd6\x0e\x77\x8e\xd8\xdc\x5f\xf0\xc3\xb5\x77\x3e\x55\xd0\x56\xa0\xc7\x41\x89\x5b\xad\xfe\x76\xc7\xe3\xfa\x70\x58\xfe\x74\x3c\x0e\xc9\x40\xd1\x1d\x8f\x8d\xd4\x04\xba\x69\xae\x26\x7a\xd7\x09\xd7\xa2\xcd\xda\xf9\x82\xff\x8f\xf1\x20\x6d\xed\x86\x27\x01\x19\x86\xe9\x4d\x23\xb8\x45\x6e\x9c\x13\x50\xae\x12\x60\x06\x5e\xff\x73\xdd\x38\xd7\x83\x6c\x5f\x5c\x2c\xe8\x02\xd3\x0e\xbb\x2f\xd3\x20\xa9\xf9\x94\xbe\xcc\x43\x60\x0f\x2c\x7b\xa4\xaf\x4b\x52\x08\x55\xd0\x1e\xff\x94\xe8\xca\xed\x6f\xf5\x7c\xfb\x63\x46\x1d\x86\x27\xd0\xa1\x9a\xbc\x74\xd6\xb2\x40\xae\xe6\x0d\xa9\x7b\x80\xed\x3d\xf3\x7e\x6a\x76\x9d\x92\x74\x44\xf4\x3e\x61\xfc\x10\x73\xe9\x9d\xbe\x20\xfc\x34\xa0\x41\x94\x9e\x55\x12\xaa\x1a\xe7\xd3\x65\x84\x1d\x12\x8e\x15\xda\x33\xf9\x1f\xa4\x7c\x4a\x54\x99\xde\xf7\x9b\x7a\xa9\x29\x7a\xc8\x4c\x0a\x36\x41\x23\x94\xc4\x8f\x19\x68\x79\xbe\xd9\x21\xf9\x84\x4f\x20\x3a\xdb\xad\x13\x50\x85\xe9\x24\x50\x12\x06\xff\x4c\xa4\xe6\x0d\x76\x35\xcd\x17\x17\xb5\x56\x63\x0d\x3e\x21\x75\x4b\x8d\xe3\xfa\x60\x32\x9f\x0a\xc7\x13\x72\x92\x71\x89\x37\x33\xa1\xb1\x0c\x5e\x0e\x2c\xc0\xda\x06\xce\xcb\x0a\x0a\xd2\x63\x80\x19\xfd\x86\xb8\x03\x9b\x66\x31\xac\x24\x18\xc3\x5a\xe2\x10\x2e\xca\x15\x4e\x18\x1e\x97\xfc\x85\x63\x44\x95\x5a\x86\xd9\x6d\x6b\xec\x3e\xd7\x95\xb3\xfb\xf3\x1d\x6f\x4d\x7b\x54\x38\xc1\x16\x29\x22\x75\xfa\xf6\x7e\x1e\xd4\xab\xe8\x05\xf6\x92\x98\xd5\xea\x9d\xaa\xe3\x1f\x25\xfb\x93\xd1\x28\x16\xc6\x93\x77\xa0\x7f\xb6\xd1\xb0\xb3\xb5\xf8\x30\x57\x2e\x1c\xe7\x60\xf8\x52\xa8\x01\x59\xcf\xa9\x66\x08\xc9\x63\xd6\xd3\xea\x90\x67\x33\x4d\xe3\x79\x75\xf0\x21\x70\xa5\x77\xdb\xb8\x5e\x37\xbf\x02\x00\x00\xff\xff\x82\xd7\x94\x83\x86\x06\x00\x00"),
 		},
 		"/charts/components/istio-operator/templates/clusterrole_binding.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "clusterrole_binding.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 292,
+			uncompressedSize: 505,
+
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x91\x31\x4f\x43\x31\x0c\x84\xf7\xfc\x0a\xab\x13\x0c\x09\x62\x43\xd9\x80\x81\x8d\xa1\x48\xdd\xdd\x3c\x17\x4c\x5f\xe3\xe0\x38\x1d\x88\xf2\xdf\xd1\x53\xf5\xa6\x4a\x6c\x9d\xcf\xbe\x3b\x7d\x77\xe4\x3c\x45\x78\x9d\x5b\x35\xd2\xad\xcc\xf4\xc2\x79\xe2\xfc\xe9\xb0\xf0\x8e\xb4\xb2\xe4\x08\xba\xc7\x14\xb0\xd9\x97\x28\xff\xa2\xb1\xe4\x70\x7c\xaa\x81\xe5\xe1\xfc\xe8\x4e\x64\x38\xa1\x61\x74\x00\x19\x4f\x14\x81\xab\xb1\x78\x29\xa4\x68\xa2\xbd\x7b\xe0\x03\x64\x31\xb8\xa3\x1f\x08\x3b\x9c\x1b\xd5\xa0\x74\xe6\xc5\x1d\x36\x9b\x7b\x18\xc3\xf7\x7e\x2d\x8d\xb1\x3c\x53\x9e\x60\x0c\x57\xdb\xfe\x9b\x92\xd5\xe8\x3c\x5c\x5a\x7f\x90\x9e\x39\xd1\x73\x4a\xd2\xb2\xdd\x38\xfe\xe2\x5e\x0b\x26\x8a\xd0\xfb\x7a\xbc\xc6\xbc\xaf\xe2\x18\x4e\x65\xa6\x2d\x1d\x16\x20\x57\x78\x6f\xde\x12\x0b\xbf\xa9\xb4\xf2\xcf\x6a\xce\x7b\xef\xfe\x02\x00\x00\xff\xff\xee\x27\xe2\x15\xf9\x01\x00\x00"),
+		},
+		"/charts/components/istio-operator/templates/crds.yaml": &vfsgen۰CompressedFileInfo{
+			name:             "crds.yaml",
+			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
+			uncompressedSize: 147,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x8f\x31\x4e\x04\x31\x0c\x45\x7b\x9f\x22\x17\x48\x10\x1d\x4a\x07\x14\x74\x14\x8b\xb4\xbd\x37\x63\xc0\x6c\x36\x8e\x6c\x67\x0a\x46\x73\x77\x84\x46\x53\xa1\xa1\xf5\x93\xff\xff\xef\xca\x6d\xca\xe1\xb9\x0e\x73\xd2\x93\x54\x7a\xe2\x36\x71\xfb\x00\xec\x7c\x26\x35\x96\x96\x83\x5e\xb0\x24\x1c\xfe\x29\xca\xdf\xe8\x2c\x2d\x5d\x1f\x2c\xb1\xdc\xcd\xf7\x70\x23\xc7\x09\x1d\x33\x84\xd0\xf0\x46\x39\xb0\x39\x4b\x94\x4e\x8a\x2e\x0a\x36\x2e\x5f\x54\xdc\x32\xc4\xb0\xd5\xbd\x91\xce\x5c\xe8\xb1\x14\x19\xcd\x8f\xfe\xb6\xb3\x75\x2c\x94\xc3\xb2\xa4\x33\xd6\x41\x96\x76\xfe\xba\xc3\x75\x05\x95\x4a\x27\x7a\xff\x9d\xf0\x47\xe8\x38\x1e\x3b\xbf\xa8\x8c\xfe\x8f\x20\xc4\x18\xe1\x27\x00\x00\xff\xff\x35\x67\xfc\x3d\x24\x01\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xaa\xae\xd6\x55\xc8\x4c\x53\xd0\x0b\x4b\xcc\x29\x4d\x2d\xd6\x4b\xcd\x4b\x4c\xca\x49\x75\x0e\x72\x09\x49\xcd\x2d\xc8\x49\x2c\x49\x2d\x56\xd0\xad\xad\xe5\x02\xa9\x2a\x4a\xcc\x4b\x4f\x55\x50\x29\x48\x2c\xc9\xd0\x51\x50\x49\xaa\x04\xc9\x59\xd9\x2a\xe8\xb9\x65\xe6\xa4\x16\xeb\xb9\xe7\xe4\x27\x29\x28\x25\x17\xa5\x14\xeb\x6b\xe9\x55\x26\xe6\xe6\x28\x81\x35\xea\xea\xea\x72\x55\x57\x2b\xa8\xc0\x54\xa5\x96\x40\x4c\x50\x80\x1a\x9a\x9a\x97\x02\xb7\x00\xc6\x06\x04\x00\x00\xff\xff\x92\xc5\x4c\x59\x93\x00\x00\x00"),
 		},
 		"/charts/components/istio-operator/templates/deployment.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "deployment.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 1190,
+			uncompressedSize: 1659,
+
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x94\x4f\x6f\x9b\x4c\x10\xc6\xef\x7c\x8a\x51\x4e\xef\x7b\xc0\x91\x9b\x43\x25\x6e\xc8\xc1\xad\x25\x07\x10\x26\x89\x7a\xb2\x36\xcb\x38\x59\x75\xd9\xdd\xec\x0e\x4e\x2d\xc2\x77\xaf\xb0\x83\x03\xfe\x23\x57\xaa\xca\x09\xcd\x33\x3c\xbf\x61\x76\x76\x98\x11\x0f\x68\x9d\xd0\x2a\x00\x66\x8c\xbb\x5e\x8f\xbd\x9f\x42\x15\x01\xdc\xa2\x91\x7a\x53\xa2\x22\xaf\x44\x62\x05\x23\x16\x78\x00\x8a\x95\xe8\x0c\xe3\x18\x40\x5d\x8f\x1e\x98\xac\xd0\x8d\xb4\x41\xcb\x48\xdb\xb8\x13\x9b\xe6\x23\x35\x00\xe1\x48\x68\xbf\xcb\xa8\x6b\x1f\xc4\x0a\x94\x26\xf8\x0f\x5f\xa1\x33\xb0\xb8\x16\x6d\x11\x70\x75\xf5\x3f\x34\x8d\x5f\xd7\xc7\x52\xd3\xb4\x1f\xa3\x2a\xa0\x69\x3c\x67\x90\xb7\xe5\x58\x34\x52\x70\xe6\x02\x18\x7b\x00\x0e\x25\x72\xd2\xb6\x55\x00\x4a\x46\xfc\x65\xce\x9e\x50\xba\x5d\xe0\x74\x49\x1e\x00\x61\x69\x24\x23\xfc\xf8\xae\xf7\xbb\xed\x23\x07\x16\x67\x4d\x00\xba\xa2\xb6\xef\x68\xd7\x82\x63\xc8\xb9\xae\x14\xc5\xff\xb0\x15\x3b\x1e\xd7\x8a\x98\x50\x68\x7b\x85\xfa\xe7\x4b\xdd\x3d\xa2\x64\xcf\x83\x83\x7c\xa9\x9e\x9a\xe6\xba\xcb\x0c\x3e\x05\x62\xcf\x7b\xd4\x0e\x57\x96\x4c\x15\x41\x2f\xe4\xc3\x09\x82\xbf\x6d\x04\xf6\x43\x0e\x79\x65\x05\x6d\x26\x5a\x11\xfe\xa2\xbe\x05\x00\x93\x52\xbf\xa5\x56\xac\x85\xc4\x67\x8c\x1c\x67\x92\xd1\x76\x3a\x57\x4c\x3a\x1c\xe4\x72\x66\xd8\x93\x90\x82\x04\xba\xa1\x0b\x40\x61\xb5\x39\x8c\xf9\x10\xce\xe7\x83\x98\xe9\x40\xc5\x29\x7f\x8b\xac\x48\x94\xdc\x64\x5a\xd3\x54\x48\x74\x1b\x47\x58\x06\x40\xb6\x3a\x48\xac\x54\xe8\xbe\x59\x5d\x99\x00\xc6\x37\x37\x5f\x8f\xc5\x7b\x87\xf6\x9c\x16\x6b\xd5\x12\x8e\x7c\xb7\x87\x93\x56\x52\xa6\x5a\x0a\xbe\x09\x60\xb6\x8a\x35\xa5\x16\x5d\x7b\x27\xfb\x65\x3a\x5d\x59\xde\xf6\xa0\xae\x81\xf4\x0f\x56\x4a\x38\xbc\x99\xa3\x7d\x16\xbc\x03\x59\x51\xc2\x3b\x08\x55\xa0\x22\x18\x7f\x81\xc1\xd1\xa2\x5a\x0f\x3b\xd7\x8d\xd1\x63\x98\x4f\xbe\x2f\xe3\xf0\x2e\x5a\xa4\xe1\x24\x3a\xe8\xee\xba\x05\xf6\x67\xe9\xad\xbd\x7e\x58\xec\x77\x42\x4b\x7e\xad\x34\xe1\x80\xf6\x69\x3f\x8f\xc2\xdb\x28\x5b\x46\xf3\x68\x92\xcf\x92\xf8\xcf\x41\x47\xdb\xe7\x02\x28\x4d\x6e\xb7\xe6\xa7\x7c\xa7\x56\x97\x87\x73\x03\xb0\x12\x28\x8b\x0c\x57\xc7\xca\x87\x96\x32\x7a\x09\xf6\x8b\x63\xd4\x72\x4e\xa2\x93\x34\xca\xc2\x3c\xc9\xce\xf2\xff\xe6\xbf\x1e\xc3\x59\xbe\x9c\x26\xd9\x32\x8b\x16\xc9\x7d\x36\x89\x16\xcb\x7c\x76\x17\x25\xf7\xf9\xe5\xa3\x12\x34\xd5\x36\xeb\x66\x24\x17\x25\xea\x8a\x2e\xf0\xb2\xe8\x61\xb6\x98\x25\xf1\x25\xf7\xfd\xda\xfa\xb4\xf3\x7d\xdf\xfb\x1d\x00\x00\xff\xff\x3e\x74\x00\x9e\x7b\x06\x00\x00"),
+		},
+		"/charts/components/istio-operator/templates/istio-namespace.yaml": &vfsgen۰CompressedFileInfo{
+			name:             "istio-namespace.yaml",
+			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
+			uncompressedSize: 183,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x8c\x93\xcf\x8e\xda\x30\x10\xc6\xef\x79\x8a\x79\x81\xb0\x0b\x2d\xab\xca\xb7\x08\xd2\x76\x25\x36\x44\x29\xdd\x1e\x57\x5e\x33\x2c\x56\xfd\xaf\xf6\x18\x15\xad\x78\xf7\x2a\x81\x94\x04\x88\x5a\x9f\xa2\xf9\xc6\xbf\xcf\x33\x93\xe1\x4e\x3e\xa3\x0f\xd2\x1a\x06\xdc\xb9\x70\xb7\x1b\x27\x3f\xa5\x59\x33\x98\xa3\x53\x76\xaf\xd1\x50\xa2\x91\xf8\x9a\x13\x67\x09\x80\xe1\x1a\x83\xe3\x02\x19\xbc\xbf\x8f\x9e\xb9\x8a\x18\x46\xd6\xa1\xe7\x64\x7d\xd1\x8a\x87\xc3\x29\x95\x81\x0c\x24\x6d\xda\x66\x24\xc1\xa1\xa8\x39\x1e\x9d\x92\x82\x07\x06\xe3\x04\x20\xa0\x42\x41\xd6\xd7\x0a\x80\xe6\x24\xb6\x0b\xfe\x8a\x2a\x1c\x03\x03\x2c\x00\x42\xed\x14\x27\x3c\xdd\xeb\xbc\xb3\x3e\xaa\x87\x18\x84\x00\xb4\x8f\x6a\xbe\x51\x44\x2f\x69\x3f\xb3\x86\xf0\x37\x9d\x6f\xfb\x68\xb2\x50\x58\x53\x59\x4b\x0c\xc8\x47\xec\x4b\xdf\x03\x7a\x06\x0f\xd3\xe9\x87\x8f\x7d\xe1\x8b\xb7\xd1\xf5\x95\x80\x7e\x27\x05\x66\x42\xd8\x68\xa8\x18\x7a\x17\x80\xb0\x86\xb8\x34\xe8\x3b\x65\xa4\xc3\x85\x1c\x8f\xd4\xfc\xad\x37\x9f\x6d\x7c\x3d\x1c\xee\xda\x4c\x76\x16\x88\xbf\x35\xa3\x6a\x8f\xb0\x5a\x73\xb3\x66\x9d\x50\x0a\x37\x1c\xd2\xa6\x02\xbc\x32\x2d\xa3\x52\xa5\x55\x52\xec\x19\x3c\x6e\x0a\x4b\xa5\xc7\x50\xff\x42\xe7\x3c\x8f\xc1\x46\x2f\x30\x74\x4d\x00\x94\xd4\x92\x2e\x62\x00\xc2\x45\x06\x93\xfb\x7b\x7d\x11\xd7\xa8\xad\xdf\x33\x98\x4c\x1f\x9e\x64\x4f\xf3\xf8\x2b\x62\x18\x20\x4d\x07\x41\xe3\xc9\xa7\x1e\x08\xcd\xae\x4f\x68\x9b\xfe\x23\x5b\xcd\xbe\xbe\x14\xd9\x53\xfe\xad\xcc\x66\xf9\x05\x6e\x57\xb7\xb5\xdb\xf9\x66\x46\xfd\xb5\xb8\x66\x2e\xf2\x6c\x9e\x57\x2f\xf9\x22\x9f\xad\x1e\x97\xc5\xff\xd3\x6f\xef\xdd\xb5\x41\xb9\x9c\x37\xd0\x5b\xbc\xcf\xde\xea\xcb\x66\x01\x6c\x24\xaa\x75\x85\x9b\x6b\xe5\xa4\x95\x9c\xb6\xec\xef\xc6\x8d\x6a\x9f\x9b\xd6\xcb\x32\xaf\xb2\xd5\xb2\x1a\xf4\xff\x57\x3d\x69\x9a\x26\x7f\x02\x00\x00\xff\xff\xdf\x45\xfe\xfe\xa6\x04\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x84\xcd\x3d\x0a\xc2\x40\x10\x47\xf1\x7e\x4e\xf1\x07\xeb\xac\xd8\xee\x19\xc4\x32\xa4\x1d\x37\x13\x19\xf6\x63\x82\xb3\xa6\x09\xb9\xbb\xd8\xa4\xb5\xff\xf1\xde\x30\x0c\x74\xc1\x34\x4d\x11\x77\xcb\x56\xad\xeb\x26\xf0\x55\x92\x2e\x9a\x90\xac\x2d\xfa\x22\x5e\x75\x94\xb7\xab\xb5\x88\xed\x46\x59\xdb\x1c\xf1\xe0\x2a\xbe\x72\x12\xaa\xd2\x79\xe6\xce\x91\x80\xc6\x55\x22\xf6\x3d\x8c\x5c\x3e\xe2\x41\xbd\xab\x9d\xf4\x38\x08\x28\xfc\x94\xe2\x3f\x0c\x94\x73\x1a\xb2\xb6\xcd\x4a\x0e\x6a\xd7\xbf\x91\x6f\x00\x00\x00\xff\xff\x23\xf4\xf3\x0b\xb7\x00\x00\x00"),
 		},
 		"/charts/components/istio-operator/templates/istio-operator-cr.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "istio-operator-cr.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 408,
+			uncompressedSize: 225,
+
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x54\xce\x31\x0e\x83\x30\x0c\x05\xd0\x3d\xa7\xb0\xd4\x99\x54\xac\xb9\x41\xa5\xaa\xdd\x10\xab\x15\x4c\x6b\x11\xe2\x28\x71\x59\x50\xee\x5e\x41\x61\xe8\xea\xff\xf5\xfc\x9b\xa6\x31\x17\xe8\xfb\xde\xc1\x5d\x26\x99\x45\x79\x21\x28\x89\x3c\x8f\xec\xc1\x4b\x1c\xf9\x65\x30\x71\x47\xb9\xb0\x44\x07\x1c\x8b\x62\x08\x96\x8b\xb2\x58\x96\xeb\xd2\x62\x48\x6f\x6c\xcd\xc4\x71\x70\x70\xdb\xee\xcf\x44\x19\x55\xb2\x99\x49\x71\x40\x45\x67\x00\x22\xce\x54\x12\x7a\x72\xb0\xae\xb6\xc3\xf0\xa1\xf2\x63\x1e\x67\x52\xeb\xd1\x73\xb0\x07\x5e\xa2\x66\x09\x29\x60\x24\xb3\xad\xda\x9c\x94\x65\xe4\xb0\x2b\xf0\xc7\x9c\x5f\xed\xd1\x80\x5a\xcd\x37\x00\x00\xff\xff\x19\xd5\x75\x6b\xe1\x00\x00\x00"),
+		},
+		"/charts/components/istio-operator/templates/namespace.yaml": &vfsgen۰CompressedFileInfo{
+			name:             "namespace.yaml",
+			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
+			uncompressedSize: 161,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x94\x8f\xb1\x6a\xc3\x40\x0c\x86\x77\x3d\x85\xa0\xb3\xaf\x64\xbd\x37\x28\x94\x76\x0b\x5e\xd5\x8b\xdc\x0a\xcb\xd2\x71\x77\xf5\x12\xfc\xee\xe5\x9c\x26\x50\x3a\x84\xac\xd2\xcf\xf7\xfd\xff\x30\x0c\xf0\x84\xe3\x38\x46\x7c\xf5\xd9\x17\x6f\xb2\x32\xd6\xcc\x49\x26\x49\x98\xdc\x26\xf9\x04\xca\x72\xe4\x52\xc5\x2d\xe2\x7a\x80\x59\xec\x14\xf1\x8d\x16\xae\x99\x12\xc3\xc2\x8d\x4e\xd4\x28\x02\xa2\xd1\xc2\x11\xcf\xe7\x70\x24\xfd\xe6\x1a\xa4\x36\xf1\x5b\x74\xdb\x00\x51\xe9\x83\xb5\xf6\x30\xa2\xde\xa4\x61\x16\x5b\x5d\xe7\x20\xfe\x7c\x17\xf2\x78\x6d\xb1\xda\x48\xf5\x82\xea\x8e\xf5\x40\x9a\xbf\xe8\xba\xe6\xa5\xdf\xdf\x33\x17\x6a\x5e\xfe\x2d\xda\xbd\x77\x66\x5d\x4a\xef\x8f\xe4\xd6\x8a\x6b\x56\x32\x86\xde\xaa\x73\x72\xf1\x49\x74\xa7\xe0\x1f\xcc\xd5\x1a\x7e\x13\xb8\x6d\xf0\x13\x00\x00\xff\xff\xea\x32\xe4\x63\x98\x01\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x4c\xce\xb1\x0d\xc2\x30\x10\x05\xd0\xde\x53\xdc\x02\x8e\x44\xeb\x21\x28\x28\xd2\xff\xd8\x5f\xe8\xc0\x3e\x47\x39\x43\x13\x65\x77\x04\x12\x88\xfe\x15\x0f\xab\xce\xdc\x5c\xbb\x25\x79\x9e\xc2\x5d\xad\x24\x39\xa3\xd1\x57\x64\x86\xc6\x81\x82\x81\x14\x44\x0c\x8d\x49\xf6\x7d\x9a\x51\x1f\xf4\xa9\xaf\xdc\x30\xfa\xf6\xd3\xc7\x11\x44\x2a\x16\x56\x7f\x7b\x11\xf5\xa1\x3d\x7e\x5d\x6c\x30\x5c\x59\x92\x5c\x98\xbb\x65\xad\xfc\x53\x6a\x37\xe6\xf1\x79\x14\x75\x2c\x95\x25\xc4\x18\xc3\x2b\x00\x00\xff\xff\xf3\xe2\xc5\xfd\xa1\x00\x00\x00"),
 		},
 		"/charts/components/istio-operator/templates/service-monitor.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "service-monitor.yaml",
@@ -1255,21 +1276,23 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/istio-operator/templates/service.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "service.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 255,
+			uncompressedSize: 326,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x8e\x31\xca\xc3\x30\x0c\x46\x77\x9f\x42\x17\x70\xe0\x27\x4b\xf0\x21\x7e\x0a\x85\xec\xaa\xf3\xd1\x9a\x3a\xb1\x91\xd4\x2c\x21\x77\x2f\x49\x1b\xe8\xd2\x8e\x7a\x7a\x4f\x88\x6b\xea\x21\x9a\xca\x14\x68\xfe\x73\xf7\x34\x0d\x81\xce\x90\x39\x45\xb8\x11\xc6\x03\x1b\x07\x47\x34\xf1\x08\xad\x1c\x11\x68\x59\x9a\x9e\xf3\x03\xda\x94\x0a\x61\x2b\xf2\x7f\x2c\xd7\xd5\x11\x65\xbe\x20\xeb\x16\xbd\xb2\x40\x49\x2d\x15\x7f\xd8\xee\x0b\xd6\x8a\xb8\x55\xb5\x88\xed\xb9\x7f\x7b\x37\xb3\xea\x47\x98\xa4\xa8\xfb\xd5\xcd\x08\xd4\xb5\x5d\xbb\x8f\xc6\x72\x85\x9d\x3e\xa1\x22\x23\x5a\x91\x1f\x5f\x78\xef\xdd\x33\x00\x00\xff\xff\xa5\xd4\x55\xb5\xff\x00\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x8f\xbd\x4a\x05\x31\x10\x85\xfb\x3c\xc5\x70\x2b\x2d\x72\x41\x6e\x73\xc9\x43\x88\x20\x6c\x3f\x66\x8f\x3a\xb8\x9b\xc4\xc9\xb8\x4d\xc8\xbb\x4b\x56\x17\x04\xc5\x72\xce\x0f\xe7\x1b\x2e\x32\x41\xab\xe4\x14\x68\xbb\x73\x6f\x92\xe6\x40\x8f\xd0\x4d\x22\xdc\x0a\xe3\x99\x8d\x83\x23\x4a\xbc\xa2\x16\x8e\x08\xd4\xda\x79\xe2\xe5\x03\xf5\x9c\x0b\x94\x2d\xeb\xfd\x61\xf6\xee\x88\x16\x7e\xc2\x52\x47\xe9\xab\x16\x48\xaa\x49\xf6\x47\xda\xfd\x2d\xb7\xe6\x49\x9e\x29\x65\xa3\x1b\xbc\xd3\xb1\xa1\xd8\x64\xf0\xd1\xe9\x74\x4b\xbd\xfb\xd6\x7e\x5b\xbd\x8f\x32\xd2\x4c\xbd\xbb\x5a\x10\xc7\x78\xc9\x6a\x3b\x85\xff\x9e\x7b\x35\x2b\x7e\x85\xa9\xc4\xba\xc3\x8d\x44\xa0\xeb\xe5\x7a\xd9\x4f\x63\x7d\x81\x3d\xfc\x14\x2b\x16\x44\xcb\xfa\xcf\x33\xde\x7b\xf7\x19\x00\x00\xff\xff\x52\x9e\x79\xcd\x46\x01\x00\x00"),
 		},
-		"/charts/components/istio-operator/templates/service_account.yaml": &vfsgen۰FileInfo{
-			name:    "service_account.yaml",
-			modTime: time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			content: []byte("\x61\x70\x69\x56\x65\x72\x73\x69\x6f\x6e\x3a\x20\x76\x31\x0a\x6b\x69\x6e\x64\x3a\x20\x53\x65\x72\x76\x69\x63\x65\x41\x63\x63\x6f\x75\x6e\x74\x0a\x6d\x65\x74\x61\x64\x61\x74\x61\x3a\x0a\x20\x20\x6e\x61\x6d\x65\x73\x70\x61\x63\x65\x3a\x20\x7b\x7b\x2e\x56\x61\x6c\x75\x65\x73\x2e\x6f\x70\x65\x72\x61\x74\x6f\x72\x4e\x61\x6d\x65\x73\x70\x61\x63\x65\x7d\x7d\x0a\x20\x20\x6e\x61\x6d\x65\x3a\x20\x69\x73\x74\x69\x6f\x2d\x6f\x70\x65\x72\x61\x74\x6f\x72\x0a\x2d\x2d\x2d\x0a"),
+		"/charts/components/istio-operator/templates/service_account.yaml": &vfsgen۰CompressedFileInfo{
+			name:             "service_account.yaml",
+			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
+			uncompressedSize: 187,
+
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x8e\xb1\xaa\xc3\x30\x0c\x45\x77\x7f\xc5\x25\xd3\x7b\x83\x03\x5d\xbd\xf5\x07\xba\x14\xb2\x0b\x47\x05\xd1\xc6\x4e\x6d\x25\x8b\xd0\xbf\x97\x40\x33\x75\x3e\xe7\x5e\x0e\xad\x32\x71\xeb\x52\x4b\xc2\x7e\x09\x4f\x29\x73\xc2\x9d\xdb\x2e\x99\xaf\x39\xd7\xad\x68\x58\x58\x69\x26\xa5\x14\x80\x42\x0b\xf7\x95\x32\x27\x98\x8d\x13\xbd\x36\xee\x63\x5d\xb9\x91\xd6\x76\x3b\xa1\xfb\x57\x4d\x90\xae\x52\xe3\x69\x98\x45\xc8\x03\xa5\x2a\xfe\xf8\x8d\xf3\xa0\xf1\x2e\x47\x03\x86\xe1\x1f\xee\xd1\xec\x17\xb9\x1f\x63\x2e\x33\xdc\x43\x8c\x31\x7c\x02\x00\x00\xff\xff\x5c\x2c\x51\x6f\xbb\x00\x00\x00"),
 		},
 		"/charts/components/istio-operator/values.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "values.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 165,
+			uncompressedSize: 585,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\xcc\xb1\xaa\x02\x41\x0c\x85\xe1\x3e\x4f\x11\xb8\xf5\x1d\x11\xc1\x22\xcf\x20\xda\x4e\x1b\xc7\xec\x6e\xd8\x9d\xcd\x30\x89\x82\x6f\x2f\xac\x5a\x59\x1e\xfe\xc3\x37\xdd\xaf\x84\x37\x2b\xb3\xf4\xa4\xb6\x53\x0f\x35\x08\x1e\x09\xf7\xe9\x98\x0e\x60\x4d\x3a\x87\xf5\x33\x57\xf1\xc6\x45\x08\xb7\xcf\xff\x37\xc0\x36\x7f\xb2\x3f\x3d\xa4\x02\xfc\x61\xce\x99\xf0\x64\xb3\x55\x0b\x7d\x08\x7a\x93\xa2\x83\x16\x2c\x13\xaf\xa3\xf8\x1b\xb8\x7c\x38\x02\xc4\xd6\x6d\xd0\x45\x08\xab\xae\x5a\x79\x81\x57\x00\x00\x00\xff\xff\x89\x40\x7c\x1b\xa5\x00\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x51\xcd\x6e\xdb\x30\x0c\xbe\xeb\x29\x88\xee\x3c\xcf\x75\xd1\x6d\xd0\xb5\xc5\x4e\xeb\x02\x04\x19\x90\xab\x22\xd3\x31\x11\xc9\xd4\x44\x2a\x41\xde\x7e\x90\x17\x7b\x5b\x7a\xd3\x47\x7e\x7f\xa0\xc6\x72\xb0\xd0\xb3\x3f\x61\x6e\x88\x3f\x91\x28\xb1\x51\x77\xb4\xf0\xd8\x7c\x69\x9e\x8c\xe1\x84\xd9\x29\xe7\x1f\x2e\xa2\x24\xe7\xd1\xc2\x4c\xfa\xb8\x2c\x8c\xf9\x00\x3f\x05\x7b\x50\x86\x8c\x29\x38\x8f\x7f\x18\xab\xa2\x6e\xa4\xa4\xc4\x59\x61\x51\xc1\xc5\xa9\x1f\x21\x96\xa0\x94\x02\xc2\xb4\x90\xa5\x31\xf3\x0a\xfb\x55\x2f\x4b\xa4\x5c\x45\x31\x9a\x8b\x23\xfd\xc6\x79\x8b\xc2\x25\x7b\x94\x1d\x45\xe4\xa2\x16\x9e\xda\x56\xd6\x3a\x03\x67\x18\x31\xc4\xae\xc6\xbb\xbe\x07\x1d\x11\x5e\xb6\xaf\x52\xb1\x62\x4c\xc1\x69\x4d\xc3\xc9\x1d\x02\xbe\x6c\x5f\x77\xcb\xcc\xc2\xe0\x82\x60\x75\xca\x78\x26\x21\x9e\x66\xb7\x6a\xb0\xf6\xcf\x4b\xba\x59\x38\x16\x1e\x1e\xaa\x66\x73\x4f\x81\x1e\x07\x57\x82\xca\x7a\x4c\x6b\xe0\xaf\x41\x05\x00\x81\x22\xe9\xed\x0d\xe0\x53\xb1\xd0\xb5\x6d\xbc\xe1\x88\x91\xf3\xd5\x42\xf7\xfc\xf9\x8d\xe6\x59\xc6\x5f\x05\xe5\x4e\xf1\xfc\x4e\xf0\xd8\x7d\x7d\xa3\xda\x6a\xbf\xdf\x5b\xf8\xce\x27\x8e\xac\x74\x46\x90\x84\x9e\x06\xf2\xe0\x47\x37\x1d\x51\xcc\xff\x7f\x76\x77\xf2\x19\x6c\xfe\x69\x9f\x32\x0f\x14\xd0\x42\xa4\x89\xa2\x0b\xe6\x77\x00\x00\x00\xff\xff\x98\xb9\x22\xa2\x49\x02\x00\x00"),
 		},
 		"/charts/components/linkerd2": &vfsgen۰DirInfo{
 			name:    "linkerd2",
@@ -6453,8 +6476,11 @@ var vfsgenAssets = func() http.FileSystem {
 	fs["/charts/components/istio-operator/templates"].(*vfsgen۰DirInfo).entries = []os.FileInfo{
 		fs["/charts/components/istio-operator/templates/clusterrole.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/clusterrole_binding.yaml"].(os.FileInfo),
+		fs["/charts/components/istio-operator/templates/crds.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/deployment.yaml"].(os.FileInfo),
+		fs["/charts/components/istio-operator/templates/istio-namespace.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/istio-operator-cr.yaml"].(os.FileInfo),
+		fs["/charts/components/istio-operator/templates/namespace.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/service-monitor.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/service.yaml"].(os.FileInfo),
 		fs["/charts/components/istio-operator/templates/service_account.yaml"].(os.FileInfo),
diff --git a/pkg/components/istio-operator/component.go b/pkg/components/istio-operator/component.go
index 53d2a117..f6a69bbc 100644
--- a/pkg/components/istio-operator/component.go
+++ b/pkg/components/istio-operator/component.go
@@ -88,6 +88,10 @@ func (c *component) Metadata() components.Metadata {
 		Name: name,
 		Namespace: k8sutil.Namespace{
 			Name: namespace,
+			Labels: map[string]string{
+				"istio-operator-managed": "Reconcile",
+				"istio-injection":        "disabled",
+			},
 		},
 	}
 }


Test patch:
diff --git a/pkg/components/istio-operator/component_test.go b/pkg/components/istio-operator/component_test.go
new file mode 100644
index 00000000..45f4efa9
--- /dev/null
+++ b/pkg/components/istio-operator/component_test.go
@@ -0,0 +1,71 @@
+// Copyright 2020 The Lokomotive Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package istiooperator //nolint:testpackage
+
+import (
+	"testing"
+
+	"github.com/kinvolk/lokomotive/pkg/components/internal/testutil"
+)
+
+func TestConversion(t *testing.T) {
+	testCases := []struct {
+		name                 string
+		inputConfig          string
+		expectedManifestName string
+		expected             string
+		jsonPath             string
+	}{
+		{
+			name:                 "default profile",
+			inputConfig:          `component "experimental-istio-operator" {}`,
+			expectedManifestName: "istio-operator/templates/istio-operator-cr.yaml",
+			jsonPath:             "{.spec.profile}",
+			expected:             "minimal",
+		},
+		{
+			name: "demo profile",
+			inputConfig: `component "experimental-istio-operator" {
+				profile = "demo"
+			}`,
+			expectedManifestName: "istio-operator/templates/istio-operator-cr.yaml",
+			jsonPath:             "{.spec.profile}",
+			expected:             "demo",
+		},
+	}
+
+	for _, tc := range testCases {
+		tc := tc
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+
+			component := newComponent()
+			m := testutil.RenderManifests(t, component, name, tc.inputConfig)
+			gotConfig := testutil.ConfigFromMap(t, m, tc.expectedManifestName)
+
+			testutil.MatchJSONPathStringValue(t, gotConfig, tc.jsonPath, tc.expected)
+		})
+	}
+}
+
+func TestVerifyServiceMonitor(t *testing.T) {
+	inputConfig := `component "experimental-istio-operator" {
+		enable_monitoring = true
+	}`
+
+	component := newComponent()
+	m := testutil.RenderManifests(t, component, name, inputConfig)
+	testutil.ConfigFromMap(t, m, "istio-operator/templates/service-monitor.yaml")
+}