## Authentication

The agent supports two forms of authentication with the CA/discovery servers: mTLS and JWT. Varying deployment
topologies mix and match these two.

For a standard Kubernetes deployment, both CA and discovery will use JWT authentication, with a token automatically

spec:
  profile: /usr/home/bob/go/src/github.com/ostromart/istio-installer/data/profiles/default.yaml
  installPackagePath: /usr/home/bob/go/src/github.com/ostromart/istio-installer/data/charts/
```

You can mix and match these approaches. For example, you can use a compiled-in configuration profile with charts in your
local file system.

#### Check diffs of manifests

  // flag will result in errors when validating the Pod. All of a Pod's containers must
  // have the same effective HostProcess value (it is not allowed to have a mix of HostProcess
  // containers and non-HostProcess containers).  In addition, if HostProcess is true
  // then HostNetwork must also be set to true.
  // +optional
  optional bool hostProcess = 4;