From 554a29800a33e410e8207fb57b498186bdbf1cf2 Mon Sep 17 00:00:00 2001
From: jshum2479 <johnny.shum@oracle.com>
Date: Tue, 23 Feb 2021 08:13:05 -0600
Subject: [PATCH] enabled outbound for channels splitted from regular default
 channel.  If not enabled, session replication will fail.

---
 operator/src/main/resources/scripts/introspectDomain.py | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/operator/src/main/resources/scripts/introspectDomain.py b/operator/src/main/resources/scripts/introspectDomain.py
index 7d96025815d..d527fae4b75 100644
--- a/operator/src/main/resources/scripts/introspectDomain.py
+++ b/operator/src/main/resources/scripts/introspectDomain.py
@@ -1176,11 +1176,9 @@ def _writeIstioNAP(self, name, server, listen_address, listen_port, protocol, ht
     self.writeln('<d:listen-port %s>%s</d:listen-port>' % (action, listen_port))
     self.writeln('<d:http-enabled-for-this-protocol %s>%s</d:http-enabled-for-this-protocol>' %
                  (action, http_enabled))
-    self.writeln('<d:tunneling-enabled %s>false</d:tunneling-enabled>' % action)
-    self.writeln('<d:outbound-enabled %s>false</d:outbound-enabled>' % action)
+    # This needs to be enabled, since we are splitting from server default channel
+    self.writeln('<d:outbound-enabled %s>true</d:outbound-enabled>' % action)
     self.writeln('<d:enabled %s>true</d:enabled>' % action)
-    self.writeln('<d:two-way-ssl-enabled %s>false</d:two-way-ssl-enabled>' % action)
-    self.writeln('<d:client-certificate-enforced %s>false</d:client-certificate-enforced>' % action)
     self.undent()
     self.writeln('</d:network-access-point>')