emptyDir: {}
      - name: istio-token
        projected:
          sources:
          - serviceAccountToken:
              path: istio-token
              expirationSeconds: 43200
              audience: {{ .Values.global.sds.token.aud }}
      {{- if .Values.global.mountMtlsCerts }}
      # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
      - name: istio-certs
        secret:

      - name: istio-token
        projected:
          sources:
          - serviceAccountToken:
              path: istio-token
              expirationSeconds: 43200
              audience: {{ .Values.global.sds.token.aud }}
      {{- if eq .Values.global.pilotCertProvider "istiod" }}
      - name: istiod-ca-cert
        configMap:
          name: istio-ca-root-cert
      {{- end }}

            fieldPath: metadata.annotations
  - name: istio-token
    projected:
      sources:
      - serviceAccountToken:
          path: istio-token
          expirationSeconds: 43200
          audience: {{ .Values.global.sds.token.aud }}
  {{- if eq .Values.global.pilotCertProvider "istiod" }}
  - name: istiod-ca-cert
    configMap:
      name: istio-ca-root-cert
  {{- end }}

	Local        string                      // Local host name.
	Hosts        []string                    // All hosts, including local in the grid.
	AddAuth      AuthFn                      // Add authentication to the given audience.
	AuthRequest  func(r *http.Request) error // Validate incoming requests.
	TLSConfig    *tls.Config                 // TLS to apply to the connections.
	Incoming     func(n int64)               // Record incoming bytes.

	NoMetrics bool

	// TraceOutput will print debug information on non-200 calls if set.
	TraceOutput io.Writer // Debug trace output

	httpClient   *http.Client
	url          *url.URL
	newAuthToken func(audience string) string

	sync.RWMutex // mutex for lastErr
	lastErr      error
	lastErrTime  time.Time
}

type restError string

func (e restError) Error() string {
	return string(e)
}

              - key: keyValue
                mode: 3
                path: pathValue
              name: nameValue
              optional: true
            serviceAccountToken:
              audience: audienceValue
              expirationSeconds: 2
              path: pathValue
        quobyte:
          group: groupValue
          readOnly: true
          registry: registryValue

              - key: keyValue
                mode: 3
                path: pathValue
              name: nameValue
              optional: true
            serviceAccountToken:
              audience: audienceValue
              expirationSeconds: 2
              path: pathValue
        quobyte:
          group: groupValue
          readOnly: true
          registry: registryValue

              - key: keyValue
                mode: 3
                path: pathValue
              name: nameValue
              optional: true
            serviceAccountToken:
              audience: audienceValue
              expirationSeconds: 2
              path: pathValue
        quobyte:
          group: groupValue
          readOnly: true
          registry: registryValue

              - key: keyValue
                mode: 3
                path: pathValue
              name: nameValue
              optional: true
            serviceAccountToken:
              audience: audienceValue
              expirationSeconds: 2
              path: pathValue
        quobyte:
          group: groupValue
          readOnly: true
          registry: registryValue

              - key: keyValue
                mode: 3
                path: pathValue
              name: nameValue
              optional: true
            serviceAccountToken:
              audience: audienceValue
              expirationSeconds: 2
              path: pathValue
        quobyte:
          group: groupValue
          readOnly: true
          registry: registryValue