# This is used to generate istio.yaml used for deprecated CI/CD testing.
global:
  # controlPlaneSecurityEnabled enabled. Will result in delays starting the pods while secrets are
  # propagated, not recommended for tests.
  controlPlaneSecurityEnabled: true

  mtls:
    # Default setting for service-to-service mtls. Can be set explicitly using
    # destination rules or service annotations.
    enabled: true

  # Default is 10s second
  refreshInterval: 1s

  # The trust domain corresponds to the trust root of a system
  trustDomain: test.local

  # Restrict the applications in one namespace the controller manages
  oneNamespace: true