if err != nil {
		return fmt.Errorf("bad --node-ip %q: %v", kubeServer.NodeIP, err)
	}
	if len(invalidNodeIps) != 0 {
		klog.FromContext(ctx).Info("Could not parse some node IP(s), ignoring them", "IPs", invalidNodeIps)
	}

	capabilities.Initialize(capabilities.Capabilities{
		AllowPrivileged: true,
	})

	credentialprovider.SetPreferredDockercfgPath(kubeServer.RootDirectory)

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

        {{- range $key, $value := .ProxyConfig.ProxyMetadata }}
        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
        # grpc uses xds:/// to resolve – no need to resolve VIP
        - name: ISTIO_META_DNS_CAPTURE
          value: "false"
        - name: DISABLE_ENVOY
          value: "true"
        {{with .Values.global.imagePullPolicy }}imagePullPolicy: "{{.}}"{{end}}

	// windows/64-bit         48         4MB          64    1M  (8MB)
	//      ios/arm64         33         4MB           1  2048  (8KB)
	//       */32-bit         32         4MB           1  1024  (4KB)
	//     */mips(le)         31         4MB           1   512  (2KB)

	// heapArenaBytes is the size of a heap arena. The heap
	// consists of mappings of size heapArenaBytes, aligned to

		return sz <= 16 || (sz < 1024 && disjoint(dst, sz, src, sz))
	case "386", "arm64":
		return sz <= 8
	case "s390x", "ppc64", "ppc64le":
		return sz <= 8 || disjoint(dst, sz, src, sz)
	case "arm", "loong64", "mips", "mips64", "mipsle", "mips64le":
		return sz <= 4
	}
	return false
}
func IsInlinableMemmove(dst, src *Value, sz int64, c *Config) bool {
	return isInlinableMemmove(dst, src, sz, c)
}