istio-profile-customize.yaml

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
name: demo-istiocontrolplane
spec:
profile: demo
components:
    egressGateways:
    - name: istio-egressgateway
        enabled: false
    ingressGateways:
    - name: istio-ingressgateway
        enabled: true
        k8s:
        serviceAnnotations:
# internal load-balancer in case of AKS, similar settings available for AWS & GKE
            service.beta.kubernetes.io/azure-load-balancer-internal: "true"         
    cni:
    enabled: true
    namespace: kube-system
values:
    hub: private-repo/istio
    values:
        kiali:
            hub: private-repo/kiali 
    cni:
    excludeNamespaces:
        - istio-system
        - kube-system
    logLevel: info 
    gateways:
    istio-ingressgateway:
        runAsRoot: false