istio

type MeshConfig struct {
	// mtls
	MeshPolicy *v1alpha1.MeshPolicy // meshpolicy is a singleton

	// root cert
	RootCert *v1.TlsSecret // singleton

	// routing
	DestinationRules v1alpha3.DestinationRuleList
	VirtualServices  v1alpha3.VirtualServiceList

	// rbac
	SecurityConfig
}

type SecurityConfig struct {
	RbacConfig          *v1alpha1.RbacConfig // singleton
	ServiceRoles        v1alpha1.ServiceRoleList
	ServiceRoleBindings v1alpha1.ServiceRoleBindingList
}

type Translator interface {
	// translates a snapshot into a set of istio configs for each mesh
	Translate(ctx context.Context, snapshot *v1.ConfigSnapshot) (map[*v1.Mesh]*MeshConfig, reporter.ResourceErrors, error)
}