# This defines the action the controller will take when a pod is detected as broken.

      # labelPods will label all pods with <brokenPodLabelKey>=<brokenPodLabelValue>.
      # This is only capable of identifying broken pods; the user is responsible for fixing them (generally, by deleting them).

            - name: REPAIR_INIT_CONTAINER_NAME
              value: "{{ .Values.cni.repair.initContainerName }}"
            - name: REPAIR_BROKEN_POD_LABEL_KEY
              value: "{{.Values.cni.repair.brokenPodLabelKey}}"
            - name: REPAIR_BROKEN_POD_LABEL_VALUE
              value: "{{.Values.cni.repair.brokenPodLabelValue}}"
            - name: NODE_NAME
              valueFrom:
                fieldRef:

redirection mode: "iptables" or "ebpf" redirectMode: "iptables" # Set ambient config dir path: defaults to /etc/ambient-config configDir: "" repair: enabled: true hub: "" tag: "" labelPods: true deletePods: true initContainerName: "istio-validation" brokenPodLabelKey: "cni.istio.io/uninitialized" brokenPodLabelValue: "true" # Set to `type: RuntimeDefault` to use the default profile if available. seccompProfile: {} resources: requests: cpu: 100m memory: 100Mi resourceQuotas: enabled: false pods: 5000 # The...