></div><p>With a single <code>IstioOperator</code> CR, any gateways defined in the CR (including the <code>istio-ingressgateway</code> installed in the
default profile) are upgraded in place, even when the
<a href=/v1.10/docs/setup/upgrade/canary>canary control plane method</a> is used.
This is undesirable because gateways are a critical component affecting application uptime.
They should be upgraded last, after the new control and data plane versions are verified to be working.</p><p>This guide describes t