istio-kubeconfig secret: secretName: istio-kubeconfig optional: true # Optional: istio-csr dns pilot certs - name: istio-csr-dns-cert secret: secretName: istiod-tls optional: true - name: istio-csr-ca-configmap configMap: name: istio-ca-root-cert defaultMode: 420 optional: true {{- if .Values.pilot.jwksResolverExtraRoo }} - name: extracacerts configMap: name: pilot-jwks-extra-cacerts{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }} {{- end }} {{- with .Values.pilot.volumes }} {{-...