diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html
index 6b9c003c7f..9e662241a2 100644
--- a/content/en/docs/reference/commands/install-cni/index.html
+++ b/content/en/docs/reference/commands/install-cni/index.html
@@ -750,6 +750,12 @@ These environment variables affect the behavior of the install-cni
If enabled, envoy will send builtin lables(e.g. node_name) via OTel sink. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html
index af320f03f0..c6c18d8240 100644
--- a/content/en/docs/reference/commands/istioctl/index.html
+++ b/content/en/docs/reference/commands/istioctl/index.html
@@ -6658,6 +6658,12 @@ These environment variables affect the behavior of the istioctl
com
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/en/docs/reference/commands/operator/index.html b/content/en/docs/reference/commands/operator/index.html
index 7c0f1a02dc..5b88746417 100644
--- a/content/en/docs/reference/commands/operator/index.html
+++ b/content/en/docs/reference/commands/operator/index.html
@@ -431,6 +431,12 @@ These environment variables affect the behavior of the operator
com
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html
index b5ed2a3505..563aec08d4 100644
--- a/content/en/docs/reference/commands/pilot-agent/index.html
+++ b/content/en/docs/reference/commands/pilot-agent/index.html
@@ -1184,6 +1184,12 @@ These environment variables affect the behavior of the pilot-agent
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/en/docs/reference/commands/pilot-discovery/index.html b/content/en/docs/reference/commands/pilot-discovery/index.html
index 1fd7181d61..eb353db4a5 100644
--- a/content/en/docs/reference/commands/pilot-discovery/index.html
+++ b/content/en/docs/reference/commands/pilot-discovery/index.html
@@ -587,6 +587,12 @@ These environment variables affect the behavior of the pilot-discoveryIf enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's.
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html
index 6b9c003c7f..9e662241a2 100644
--- a/content/zh/docs/reference/commands/install-cni/index.html
+++ b/content/zh/docs/reference/commands/install-cni/index.html
@@ -750,6 +750,12 @@ These environment variables affect the behavior of the install-cni
If enabled, envoy will send builtin lables(e.g. node_name) via OTel sink. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html
index af320f03f0..c6c18d8240 100644
--- a/content/zh/docs/reference/commands/istioctl/index.html
+++ b/content/zh/docs/reference/commands/istioctl/index.html
@@ -6658,6 +6658,12 @@ These environment variables affect the behavior of the istioctl
com
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/zh/docs/reference/commands/operator/index.html b/content/zh/docs/reference/commands/operator/index.html
index 7c0f1a02dc..5b88746417 100644
--- a/content/zh/docs/reference/commands/operator/index.html
+++ b/content/zh/docs/reference/commands/operator/index.html
@@ -431,6 +431,12 @@ These environment variables affect the behavior of the operator
com
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html
index b5ed2a3505..563aec08d4 100644
--- a/content/zh/docs/reference/commands/pilot-agent/index.html
+++ b/content/zh/docs/reference/commands/pilot-agent/index.html
@@ -1184,6 +1184,12 @@ These environment variables affect the behavior of the pilot-agent
If enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's. |
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |
diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html
index 1fd7181d61..eb353db4a5 100644
--- a/content/zh/docs/reference/commands/pilot-discovery/index.html
+++ b/content/zh/docs/reference/commands/pilot-discovery/index.html
@@ -587,6 +587,12 @@ These environment variables affect the behavior of the pilot-discoveryIf enabled, readiness probes will keep the connection from pilot-agent to the application alive. This mirrors older Istio versions' behaviors, but not kubelet's.
+ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY |
+Boolean |
+true |
+If disabled, Gateway API gateways will ignore workloadSelector policies, onlyapplying policies that select the gateway with a targetRef. |
+
+
ENABLE_TLS_ON_SIDECAR_INGRESS |
Boolean |
false |