   metadata:
      annotations:
        sidecar.istio.io/proxyCPU: &#34;200m&#34;
        sidecar.istio.io/proxyMemoryLimit: &#34;5Gi&#34;
</code></pre><pre><code class=language-yaml data-expandlinks=true data-repo=istio>spec:
  containers:
  - name: istio-proxy
    resources:
      limits:
        memory: 5Gi
      requests:
        cpu: 200m
        memory: 5Gi
      securityContext:
        allowPrivilegeEscalation: false
</code></pre><h3 id=custom-templates-experimental>自定义模板（试验特性）