=== begin proxy settings annotations ===AppMeshCNIAnnotation specifies that CNI will be used to configure traffic interception.

AppMeshCPULimitAnnotation specifies the CPU limits for proxy.

AppMeshCPURequestAnnotation specifies the CPU requests for proxy.

AppMeshEgressIgnoredPortsAnnotation specifies the IPs that need to be ignored when intercepting traffic.

AppMeshEgressIgnoredPortsAnnotation specifies the ports that need to ignored when intercepting traffic.

AppMeshEnvAnnotation specifies the list of environment variables that need to be programmed on Envoy sidecars This allow passing tags like DataDog environment `DD_ENV` to Envoy to help correlate observability data Here's how a sample annotations will be like e.g.

AppMeshEnvJsonAnnotation which is similar AppMeshEnvAnnotation, but it is used to specify the list Jsons of environment variables that need to be programmed on Envoy sidecars Here's how a sample annotations will be like e.g.

AppMeshGatewaySkipImageOverride specifies if Virtual Gateway sidecar image override needs to be skipped for customersto use their own sidecare image for Virtual Gateway.

AppMeshIgnoredGIDAnnotation specifies the GID used by proxy.

AppMeshIgnoredUIDAnnotation specifies the UID used by proxy.

AppMeshIPV6Annotation allows disabling IPV6 specifically for the proxyinit container.

AppMeshMemoryLimitAnnotation specifies the memory limits for proxy.

AppMeshMemoryRequestAnnotation specifies the memory requests for proxy.

AppMeshPortsAnnotation specifies the ports that proxy will forward traffic to.

AppMeshPreviewAnnotation specifies that proxy should use App Mesh preview endpoint.

AppMeshProxyEgressPortAnnotation specifies the port used by proxy for egress traffic (traffic originating from app container to external services).

AppMeshProxyIngressPortAnnotation specifies the port used by proxy for incoming traffic.

AppMeshSDSAnnotation is used if SDS is enabled at the controller level but needs to be disabledfor a particular VirtualNode.

AppMeshSecretMountsAnnotation specifies the list of Secret that need to be mounted to the proxy as a volume.

AppMeshSidecarInjectAnnotation specifies proxy should be injected for pod.

AppMeshVolumeMountsAnnotation specifies the list of volumes that need to be mounted to the proxy.

AppMeshXrayAgentConfigAnnotation specifies the mount path for the Xray daemon's configuration file.

FargateProfileLabel is added by fargate-scheduler when pod is running on AWS Fargate.

Envoy template variables used by envoys in pod and the envoy in VirtualGateway as we use the same envoy image.