imagePullSecrets:
            {{- range .Values.global.imagePullSecrets }}
            - name: {{ . }}
            {{- end }}
          {{- end }}
      waypoint: |
        apiVersion: v1
        kind: ServiceAccount
        metadata:
          name: {{.ServiceAccount | quote}}
          namespace: {{.Namespace | quote}}
          annotations:

    - header: "x-jwt-iss"
      claim: "iss"
    - header: "x-jwt-wrong-header"
      claim: "wrong_claim"
---
`
	matchers := []match.Matcher{match.And(
		// No waypoint here, these are all via ingress which doesn't forward to waypoint
		match.NotWaypoint,
		match.Or(match.ServiceName(t.Apps.B.NamespacedName()), match.AmbientCaptured()),
	)}
	headersWithToken := map[string][]string{

end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "grpc-agent") }} grpc-agent: | {{ .Files.Get "files/grpc-agent.yaml" | trim | indent 8 }} {{- end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "waypoint") }} waypoint: | {{ .Files.Get "files/waypoint.yaml" | trim | indent 8 }} {{- end }} {{- if not (hasKey .Values.sidecarInjectorWebho.templates "kube-gateway") }} kube-gateway: | {{ .Files.Get "files/kube-gateway.yaml" | trim | indent 8 }} {{- end }} {{- with .Values.si...