anchor.diff:  * Godebug has been removed from all templates
   * The `istio-multi` ServiceAccount and ClusterRoleBinding have been removed, as well as the `istio-reader` ClusterRole.
   
  -[id="ossm-envoy-sds-ca_{context}"]
  -== Envoy, Secret Discovery Service, and certificates
  +[id="ossm-envoy-services_{context}"]
  +== Envoy services
   
   * {ProductName} does not support QUIC-based services.
  -* Deployment of TLS certificates using the Secret Discovery Service (SDS) functionality of Istio is not currently supported in {ProductName}. The Istio implementation depends on a nodeagent container that uses hostPath mounts.
   
   [id="ossm-cni_{context}"]
   == Istio Container Network Interface (CNI) plug-in
  
positive.code: [id="ossm-cli-tool_{context}"]
  == Command line tool
  
  The command line tool for {ProductName} is oc.  {ProductName}  does not support istioctl.
  
  [id="ossm-automatic-injection_{context}"]
  == Automatic injection
  
negative.code: [id="ossm-tls_{context}"]
  === Transport layer security
  Transport Layer Security (TLS) is supported. This means that, if the Gateway contains a `tls` section, the OpenShift Route will be configured to support TLS.
  
  
  [id="ossm-wasm_{context}"]
  === WebAssembly Extensions
  
  {ProductName} 2.0 introduces WebAssembly extensions to Envoy Proxy as a link:https://access.redhat.com/support/offerings/techpreview/[Technology Preview].  Note that WASM extensions are not included in the proxy binary and that WASM filters from the upstream Istio community are not supported in {ProductName} 2.0.
  