de>Sidecar</code> resource to restrict what a pod can see, the restrictions are now applied if the spec contains a
<code>workloadSelector</code> (<a href=https://github.com/istio/istio/issues/11818>Issue 11818</a>).</p></li><li><p>Update the Bookinfo example to use port 80 for TLS origination.</p></li><li><p>Add liveness probe for Citadel.</p></li><li><p>Improve AWS ELB interoperability by making 15020 the first port listed in the <code>ingressgateway</code> service (<a href=https://github.com/istio/istio/i