{
  "listeners": [],
  "lds": {
    "cluster": "lds",
    "refresh_delay_ms": 1000
  },
  "admin": {
    "access_log_path": "/dev/stdout",
    "address": "tcp://127.0.0.1:15000"
  },
  "cluster_manager": {
    "clusters": [
      {
        "name": "rds",
        "connect_timeout_ms": 1000,
        "type": "strict_dns",
        "lb_type": "round_robin",
        "hosts": [
          {
            "url": "tcp://istio-pilot.istio-system:15005"
          }
        ],
        "ssl_context": {
          "cert_chain_file": "/etc/certs/cert-chain.pem",
          "private_key_file": "/etc/certs/key.pem",
          "ca_cert_file": "/etc/certs/root-cert.pem",
          "verify_subject_alt_name": [
            "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"
          ]
        }
      },
      {
        "name": "lds",
        "connect_timeout_ms": 1000,
        "type": "strict_dns",
        "lb_type": "round_robin",
        "hosts": [
          {
            "url": "tcp://istio-pilot.istio-system:15005"
          }
        ],
        "ssl_context": {
          "cert_chain_file": "/etc/certs/cert-chain.pem",
          "private_key_file": "/etc/certs/key.pem",
          "ca_cert_file": "/etc/certs/root-cert.pem",
          "verify_subject_alt_name": [
            "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"
          ]
        }
      }
    ],
    "sds": {
      "cluster": {
        "name": "sds",
        "connect_timeout_ms": 1000,
        "type": "strict_dns",
        "lb_type": "round_robin",
        "hosts": [
          {
            "url": "tcp://istio-pilot.istio-system:15005"
          }
        ],
        "ssl_context": {
          "cert_chain_file": "/etc/certs/cert-chain.pem",
          "private_key_file": "/etc/certs/key.pem",
          "ca_cert_file": "/etc/certs/root-cert.pem",
          "verify_subject_alt_name": [
            "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"
          ]
        }
      },
      "refresh_delay_ms": 1000
    },
    "cds": {
      "cluster": {
        "name": "cds",
        "connect_timeout_ms": 1000,
        "type": "strict_dns",
        "lb_type": "round_robin",
        "hosts": [
          {
            "url": "tcp://istio-pilot.istio-system:15005"
          }
        ],
        "ssl_context": {
          "cert_chain_file": "/etc/certs/cert-chain.pem",
          "private_key_file": "/etc/certs/key.pem",
          "ca_cert_file": "/etc/certs/root-cert.pem",
          "verify_subject_alt_name": [
            "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"
          ]
        }
      },
      "refresh_delay_ms": 1000
    }
  }
}
