nodeSelector:
  kubernetes.io/os: linux
  # Add a specific worker label if your cluster uses them
  # node-role.kubernetes.io/worker: "" 

# Ensure we DON'T tolerate the master node taints
tolerations: [] 

# Force Linkerd to spread across different worker nodes for HA
# affinity:
#   nodeAffinity:
#     requiredDuringSchedulingIgnoredDuringExecution:
#       nodeSelectorTerms:
#         - matchExpressions:
#             - key: node-role.kubernetes.io/control-plane
#               operator: DoesNotExist
#             - key: node-role.kubernetes.io/master
#               operator: DoesNotExist


identityTrustAnchorsPEM: |
    -----BEGIN CERTIFICATE-----
    MIIBnjCCAUWgAwIBAgIUS9ANIQmpVrY6qbpdl8Arg18p9RQwCgYIKoZIzj0EAwIw
    JTEjMCEGA1UEAwwacm9vdC5saW5rZXJkLmNsdXN0ZXIubG9jYWwwHhcNMjYwMzEz
    MjMwNDA3WhcNMzYwMzEwMjMwNDA3WjAlMSMwIQYDVQQDDBpyb290LmxpbmtlcmQu
    Y2x1c3Rlci5sb2NhbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCnfBtfAlgkD
    LVSDBOuJWBv9D0kRT2p5uZMUGY24KdR9KSua7/sRGkdnsm8NBOjj1a41wSm8N8W9
    NLV2QlPzMdmjUzBRMB0GA1UdDgQWBBTW7CLrdube2U7hqMLBkLaVTJ+f4TAfBgNV
    HSMEGDAWgBTW7CLrdube2U7hqMLBkLaVTJ+f4TAPBgNVHRMBAf8EBTADAQH/MAoG
    CCqGSM49BAMCA0cAMEQCICMroSX4r66e28v/rtycwBX4bvwzTe7QDuszGmkcIcEs
    AiABAkzRzbYpipt+fuGliHDYMsEZd1zPqTuLCK3xp2jjHg==
    -----END CERTIFICATE-----

identity:
  issuer:
    tls:
      crtPEM: |
        -----BEGIN CERTIFICATE-----
        MIIBtjCCAVygAwIBAgIUdd/8fSGsrGBI7FrbZ1lA+jS489UwCgYIKoZIzj0EAwIw
        JTEjMCEGA1UEAwwacm9vdC5saW5rZXJkLmNsdXN0ZXIubG9jYWwwHhcNMjYwMzEz
        MjMwNTI2WhcNMjcwMzEzMjMwNTI2WjApMScwJQYDVQQDDB5pZGVudGl0eS5saW5r
        ZXJkLmNsdXN0ZXIubG9jYWwwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQHU88u
        R1qhnrxcDySFKz4BqLYs/fjGwvD77PqxLp37K23lzbM5UpXVB06cnCB03plrbxg3
        VzM4Y3CTU/OgCN0/o2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQE
        AwIBhjAdBgNVHQ4EFgQUc3Y9kn7kJpEqFvXxFtE302o289AwHwYDVR0jBBgwFoAU
        1uwi63bm3tlO4ajCwZC2lUyfn+EwCgYIKoZIzj0EAwIDSAAwRQIhAPjSBYscyTfN
        99dm/or5OxYSPIS6WbaySvHrfar+9ReCAiAMkdZ8P5IrGUERW2kKhzU6jWsPfFbw
        ddI8y/PwVTDuRw==
        -----END CERTIFICATE-----
      keyPEM: |
        -----BEGIN EC PRIVATE KEY-----
        MHcCAQEEIHxdoj94UpVxEjt+kNoLePmjiyRANZFpMVqQj2wAQdeyoAoGCCqGSM49
        AwEHoUQDQgAEB1PPLkdaoZ68XA8khSs+Aai2LP34xsLw++z6sS6d+ytt5c2zOVKV
        1QdOnJwgdN6Za28YN1czOGNwk1PzoAjdPw==
        -----END EC PRIVATE KEY-----