          - name: dikastes
            image: {{page.registry}}{{page.imageNames["calico/dikastes"]}}:{{site.data.versions.first.components["calico/dikastes"].version}}
            args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"]
            securityContext:
              allowPrivilegeEscalation: false
            livenessProbe:
              exec:
                command:
                - /healthz
                - liveness
              initialDelaySeconds: 3
              periodSeconds: 3
            readinessProbe:
              exec:
                command:
                - /healthz
                - readiness
              initialDelaySeconds: 3
              periodSeconds: 3
            volumeMounts:
            - mountPath: /var/run/dikastes
              name: dikastes-sock
            - mountPath: /var/run/felix
              name: felix-sync
