name: kube-root-ca.crt
      {{- end }}
      {{- if .Values.global.mountMtlsCerts }}
      # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
      - name: istio-certs
        secret:
          optional: true
          {{ if eq .Spec.ServiceAccountName "" }}
          secretName: istio.default
          {{ else -}}
          secretName: {{  printf "istio.%s" .Spec.ServiceAccountName }}

data:
  dirTraversal.txt: |
    ../private/secret.html
    ../../private/secret.html
    ../../../private/secret.html
    ../../../../private/secret.html
    ../../../../../private/secret.html
    ../../../../../../private/secret.html
    ../../../../../../../private/secret.html
    ../../../../../../../../private/secret.html
    ..%2fprivate/secret.html
    ..%2f..%2fprivate/secret.html
    ..%2f..%2f..%2fprivate/secret.html

								"origins-0": {
									Issuer: "https://secret.foo.com",
									JwksSourceSpecifier: &envoy_jwt.JwtProvider_LocalJwks{
										LocalJwks: &core.DataSource{
											Specifier: &core.DataSource_InlineString{
												InlineString: test.JwtPubKey1,
											},
										},
									},
									Forward:           false,
									PayloadInMetadata: "https://secret.foo.com",
								},
							},

      "dynamic_active_secrets": [
        {
          "name": "default",
          "last_updated": "2023-05-15T01:32:52.262Z",
          "secret": {
            "@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret",
            "name": "default",
            "tls_certificate": {
              "certificate_chain": {

	if !nilOrEqual((*string)(ref.Group), gvk.Secret.Group) || !nilOrEqual((*string)(ref.Kind), gvk.Secret.Kind) {
		return "", &ConfigError{Reason: InvalidTLS, Message: fmt.Sprintf("invalid certificate reference %v, only secret is allowed", objectReferenceString(ref))}
	}

	secret := model.ConfigKey{
		Kind:      kind.Secret,
		Name:      string(ref.Name),

              passwordSecret:
                description: passwordSecret is name of the authentication secret for
                  BGP Peer. the secret must be of type "kubernetes.io/basic-auth",
                  and created in the same namespace as the MetalLB deployment. The
                  password is stored in the secret as the key "password".
                properties:
                  name:

          type: {{ .ServiceType | quote }}
        ---
      credential-volume: |
        spec:
          volumes:
          - name: application-credentials
            secret:
              secretName: secret
          containers:
          - name: istio-proxy
            volumeMounts:
            - name: application-credentials
              mountPath: /etc/istio/application-credentials

					}},
					{AESCBC: &apiserver.AESConfiguration{
						Keys: []apiserver.Key{
							{Name: "key1", Secret: "c2VjcmV0IGlzIHNlY3VyZQ=="},
							{Name: "key2", Secret: "dGhpcyBpcyBwYXNzd29yZA=="},
						},
					}},
					{Secretbox: &apiserver.SecretboxConfiguration{
						Keys: []apiserver.Key{
							{Name: "key1", Secret: "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY="},
						},
					}},
				},
			},
		},
	}

            },
            "gitRepo": {
              "repository": "repositoryValue",
              "revision": "revisionValue",
              "directory": "directoryValue"
            },
            "secret": {
              "secretName": "secretNameValue",
              "items": [
                {
                  "key": "keyValue",
                  "path": "pathValue",
                  "mode": 3

          },
          "gitRepo": {
            "repository": "repositoryValue",
            "revision": "revisionValue",
            "directory": "directoryValue"
          },
          "secret": {
            "secretName": "secretNameValue",
            "items": [
              {
                "key": "keyValue",
                "path": "pathValue",
                "mode": 3
              }