}} {{- end }} resources: {{ template "resources" . }} securityContext: allowPrivilegeEscala: {{ .Values.global.proxy.privileged }} privileged: {{ .Values.global.proxy.privileged }} capabilities: {{- if not .Values.istio_cni.enabled }} add: - NET_ADMIN - NET_RAW {{- end }} drop: - ALL {{- if not .Values.istio_cni.enabled }} readOnlyRootFilesyst: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 {{- else }} readOnlyRootFilesyst: true runAsGroup: {{ .ProxyGID | default "1337" }} runAsUser: {{ .ProxyUID...