type: integer
                                    time:
                                      description: The time duration a connection
                                        needs to be idle before keep-alive probes
                                        start being sent.
                                      type: string
                                  type: object

for the gateway, isolated from the main pilot. This is more robust, safer on upgrades and allows a bit more flexibility. - the dedicated pilot-per-ingress is required if the gateway needs to support k8s-style ingress. # Port and basic host configuration In order to configure the Service object, the install/upgrade needs to provide a list of all ports. In the past, this was done when installing/upgrading full istio, and involved some duplication - ports configured both in upgrade, Gateway and VirtualService....

                                      type: integer
                                    time:
                                      description: The time duration a connection
                                        needs to be idle before keep-alive probes
                                        start being sent.
                                      type: string
                                  type: object

      - name: cni-ztunnel-sock-dir
        hostPath:
          path: /var/run/ztunnel
          type: DirectoryOrCreate # ideally this would be a socket, but ztunnel may not have started yet.
      # pprof needs a writable /tmp, and we don't have that thanks to `readOnlyRootFilesystem: true`, so mount one
      - name: tmp
        emptyDir: {}
      {{- with .Values.volumes }}
        {{- toYaml . | nindent 6}}