spec:
            volumes:
            - name: application-credentials
              secret:
                secretName: secret
            containers:
            - name: istio-proxy
              volumeMounts:
              - name: application-credentials
                mountPath: /etc/istio/application-credentials

        imagePullPolicy: IfNotPresent
        env:
        - name: LOG_DIR
          value: "/tmp/logs"
        ports:
        - containerPort: 9080
        volumeMounts:
        - name: tmp
          mountPath: /tmp
        - name: wlp-output
          mountPath: /opt/ibm/wlp/output
      volumes:
      - name: wlp-output
        emptyDir: {}
      - name: tmp

        livenessProbe:
          httpGet:
            path: /livez
            port: https
            scheme: HTTPS
          periodSeconds: 10
          failureThreshold: 3
        volumeMounts:
        - mountPath: /tmp
          name: tmp-dir
      - name: metrics-server-nanny
        image: registry.k8s.io/autoscaling/addon-resizer:1.8.14
        resources:
          limits:
            cpu: 100m

apiVersion: release-notes/v2
kind: feature
area: installation
releaseNotes:
  - |

      "httpGet": {
        "host": "127.0.0.1",
        "port": 10258,
        "scheme": "HTTPS",
        "path": "/healthz"
      },
      "initialDelaySeconds": 15,
      "timeoutSeconds": 15
    },
    "volumeMounts": [
        {{cloud_config_mount}}
        {{additional_cloud_config_mount}}
        {{pv_recycler_mount}}
        { "name": "srvkube",
        "mountPath": "/etc/srv/kubernetes",
        "readOnly": true},

						{
							Name: "container1",
							VolumeMounts: []v1.VolumeMount{
								{
									Name: "vol1",
								},
							},
						},
					},
					EphemeralContainers: []v1.EphemeralContainer{
						{
							EphemeralContainerCommon: v1.EphemeralContainerCommon{
								Name: "debugger",
								VolumeMounts: []v1.VolumeMount{
									{
										Name: "vol1",
									},

          - containerPort: 15090
            protocol: TCP
            name: http-envoy-prom
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          {{- with .Values.volumeMounts }}
          volumeMounts:
            {{ toYaml . | nindent 12 }}
          {{- end }}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}

        track: stable
    spec:
      containers:
      - image: "fake.docker.io/google-samples/hello-go-gke:1.0"
        name: hello
        ports:
        - containerPort: 80
          name: http
        volumeMounts:
        - name: "data"
          mountPath: "/var/lib/data"
      volumes:
        - name: data
          hostPath:

issue:
- https://github.com/cert-manager/istio-csr/issues/113

docs: []

releaseNotes:
- |
  **Added** values to the Istio Pilot Helm charts for configuring additional container arguments, volumeMounts, and volumes. Can be used in conjunction with cert-manager istio-csr.

upgradeNotes: []

	RestartPolicy            *corev1.ContainerRestartPolicy            `json:"restartPolicy,omitempty"`
	VolumeMounts             []VolumeMountApplyConfiguration           `json:"volumeMounts,omitempty"`
	VolumeDevices            []VolumeDeviceApplyConfiguration          `json:"volumeDevices,omitempty"`