serviceAccountName: sleep
      containers:
      - name: sleep
        image: curlimages/curl
        command: ["/bin/sleep", "infinity"]
        imagePullPolicy: IfNotPresent
        volumeMounts:
        - name: tmp
          mountPath: /tmp
        securityContext:
          runAsUser: 1000
      volumes:
      - name: tmp
        emptyDir: {}

                configMap:
                  name: istio-sidecar-injector
            - path: spec.template.spec.containers[0].volumeMounts[100]
              value: |-
                name: config-volume
                mountPath: /etc/istio/config
            - path: spec.template.spec.containers[0].volumeMounts[100]
              value: |-
                name: inject-volume
                mountPath: /var/lib/istio/inject
{{- end }}

  image: ztunnel

  # Labels to apply to all top level resources
  labels: {}
  # Annotations to apply to all top level resources
  annotations: {}

  # Additional volumeMounts to the ztunnel container
  volumeMounts: []

  # Additional volumes to the ztunnel pod
  volumes: []

  # Annotations added to each pod. The default annotations are required for scraping prometheus (in most environments).

        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: true
        volumeMounts:
        - mountPath: /var/log
          name: varlog
          readOnly: false
        - mountPath: /lib/modules
          name: lib-modules
          readOnly: true
      volumes:
      - name: varlog

        prometheus.io/port: "15020"
        prometheus.io/scrape: "true"

          - name: TYPHA_MAXCONNECTIONSLOWERLIMIT
            value: "1"
          - name: TYPHA_HEALTHENABLED
            value: "true"
          - name: USE_POD_CIDR
            value: "true"
        volumeMounts:
        - mountPath: /etc/calico
          name: etc-calico
          readOnly: true
        livenessProbe:
          httpGet:
            path: /liveness
            port: 9098
            host: localhost

          requests:
            cpu: 50m
            memory: 10Mi
          limits:
            cpu: 50m
            memory: 10Mi
        securityContext:
          privileged: true
        volumeMounts:
        - name: device-plugin
          mountPath: /device-plugin
        - name: dev
          mountPath: /dev
  updateStrategy:

    terminationMessagePath: terminationMessagePathValue
    terminationMessagePolicy: terminationMessagePolicyValue
    tty: true
    volumeDevices:
    - devicePath: devicePathValue
      name: nameValue
    volumeMounts:
    - mountPath: mountPathValue
      mountPropagation: mountPropagationValue
      name: nameValue
      readOnly: true
      recursiveReadOnly: recursiveReadOnlyValue
      subPath: subPathValue

          {
            "resourceName": "resourceNameValue",
            "restartPolicy": "restartPolicyValue"
          }
        ],
        "restartPolicy": "restartPolicyValue",
        "volumeMounts": [
          {
            "name": "nameValue",
            "readOnly": true,
            "recursiveReadOnly": "recursiveReadOnlyValue",
            "mountPath": "mountPathValue",

                                "protocol": "TCP"
                            }
                        ],
                        "resources": {},
                        "volumeMounts": [
                            {
                                "name": "es-persistent-storage",
                                "mountPath": "/data"
                            }
                        ],