{{- if .Values.cni.podAnnotations }} {{ toYaml .Values.cni.podAnnotations | indent 8 }} {{- end }} spec: {{if .Values.cni.ambient.enabled }}hostNetwork: true{{ end }} nodeSelector: kubernetes.io/os: linux # Can be configured to allow for excluding instio-cni from being scheduled on specified nodes {{- with .Values.cni.affinity }} affinity: {{- toYaml . | nindent 8 }} {{- end }} tolerations: # Make sure istio-cni-node gets scheduled on all nodes. - effect: NoSchedule operator: Exists # Mark the pod...