cniEnabled: true
identity:
  issuer:
    scheme: kubernetes.io/tls
controllerReplicas: 3
enablePodDisruptionBudget: true
enablePodAntiAffinity: true
controller:
  podDisruptionBudget:
    maxUnavailable: 1
controllerResources: &id001
  cpu:
    request: 100m
    limit: 1000m
  memory:
    request: 64Mi
    limit: 512Mi
destinationResources: *id001
identityResources: *id001
heartbeatResources: *id001
proxyInjectorResources: *id001
spValidatorResources: *id001
proxy:
  resources:
    cpu:
      request: 100m
      limit: 1000m
    memory:
      request: 64Mi
      limit: 256Mi
policyController:
  resources: *id001