{"VerifyOptions.DNSName", Field, 0},
		{"VerifyOptions.Intermediates", Field, 0},
		{"VerifyOptions.KeyUsages", Field, 1},
		{"VerifyOptions.MaxConstraintComparisions", Field, 10},
		{"VerifyOptions.Roots", Field, 0},
	},
	"crypto/x509/pkix": {
		{"(*CertificateList).HasExpired", Method, 0},
		{"(*Name).FillFromRDNSequence", Method, 0},
		{"(Name).String", Method, 10},
		{"(Name).ToRDNSequence", Method, 0},

          - name: istiod-ca-cert
            configMap:
              name: istio-ca-root-cert
          {{- end }}
          {{- if eq .Values.global.pilotCertProvider "kubernetes" }}
          - name: kube-ca-cert
            configMap:
              name: kube-root-ca.crt
          {{- end }}
          {{- if .Values.global.mountMtlsCerts }}

                x-kubernetes-preserve-unknown-fields: true
              pluginName:
                description: The plugin name to be used in the Envoy configuration
                  (used to be called `rootID`).
                maxLength: 256
                minLength: 1
                type: string
              priority:
                description: Determines ordering of `WasmPlugins` in the same `phase`.