admission

var (
	PodNodeSelector = map[string]string{
		"nebula.puppet.com/scheduling.customer-ready": "true",
	}
	PodTolerations = []corev1.Toleration{
		{
			Key:    "nebula.puppet.com/scheduling.customer-workload",
			Value:  "true",
			Effect: corev1.TaintEffectNoSchedule,
		},
		{
			Key:    "sandbox.gke.io/runtime",
			Value:  "gvisor",
			Effect: corev1.TaintEffectNoSchedule,
		},
	}
	PodDNSPolicy = corev1.DNSNone
	PodDNSConfig = &corev1.PodDNSConfig{
		Nameservers: []string{
			"1.1.1.1",
			"1.0.0.1",
			"8.8.8.8",
		},
	}
)