securityContext: {{- if .Values.securityContext }} {{- toYaml .Values.securityContext | nindent 8 }} {{- else if (semverCompare ">=1.22-0" .Capabilities.KubeVersion.GitVersion) }} # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 sysctls: - name: net.ipv4.ip_unprivileged_port_start value: "0" {{- end }} {{- with .Values.volumes }} volumes: {{ toYaml . | nindent 8 }} {{- end }} containers: - name: istio-proxy # "auto" will be populated at runtime by the mutating webhook. See https...