See the License for the specific language governing permissions and
limitations under the License.
*/

package image

import "regexp"

var (
	// tagMatcher is the regex used to match a tag.
	// Basically we presume an image can be made of `[domain][:port][path]<name>[:tag][@sha256:digest]`

	Tag   string `json:"tag"`
	Proxy proxy  `json:"proxy"`
}

type proxy struct {
	Image string `json:"image"`
}

// Metadata implements Analyzer.
func (a *ImageAnalyzer) Metadata() analysis.Metadata {
	return analysis.Metadata{
		Name:        "injection.ImageAnalyzer",
		Description: "Checks the image of auto-injection configured with the running proxies on pods",
		Inputs: []config.GroupVersionKind{

  rm "${KUBE_ROOT}/staging/src/k8s.io/apiextensions-apiserver/artifacts/simple-image/apiextensions-apiserver"
}
trap cleanup EXIT

pushd "${KUBE_ROOT}/staging/src/k8s.io/apiextensions-apiserver"
cp -v ../../../../_output/local/bin/linux/amd64/apiextensions-apiserver ./artifacts/simple-image/apiextensions-apiserver
docker build -t apiextensions-apiserver:latest ./artifacts/simple-image

	"istio.io/istio/pkg/config/analysis/msg"
	"istio.io/istio/pkg/config/resource"
	"istio.io/istio/pkg/config/schema/gvk"
)

// ImageAutoAnalyzer reports an error if Pods and Deployments with `image: auto` are not going to be injected.
type ImageAutoAnalyzer struct{}

var _ analysis.Analyzer = &ImageAutoAnalyzer{}

const (
	istioProxyContainerName = "istio-proxy"
	manualInjectionImage    = "auto"
)

    spec:
      imagePullSecrets:
      - name: myregistrykey
      containers:
      - name: istio-proxy
        image: auto
        imagePullPolicy: Always
        securityContext: # to allow core dumps
          readOnlyRootFilesystem: false
      - name: app
        image: testing.hub/app:latest
        imagePullPolicy: Always
        args:
          - --metrics=15014
          - --cluster=cluster-0

apiVersion: v1
kind: Pod
metadata:
  annotations:
    proxy.istio.io/config: |
      image:
        imageType: distroless
  labels:
    app: details
  name: details-v1-pod-annotation-override
  namespace: annotation-override
spec:
  containers:
  - image: docker.io/istio/examples-bookinfo-details-v1:1.15.0
    name: details
  - image: docker.io/istio/proxyv2:1.3.1-distroless

apiVersion: v1
kind: Pod
metadata:
  labels:
    app: details
  name: details-v1-pod-old
  namespace: enabled-namespace
spec:
  containers:
  - image: docker.io/istio/examples-bookinfo-details-v1:1.15.0
    name: details
  - image: docker.io/istio/proxyv2:1.3.0
    name: istio-proxy
---
# details-v1-pod-new is up-to-date and should not get a warning.
apiVersion: v1
kind: Pod
metadata:
  labels:

Stephen Kitt <******@****.***> 1678807068 +0100

bootgo=1.20.6

set -e

if [[ ! -f run.bash ]]; then
	echo 'make.bash must be run from $GOROOT/src' 1>&2
	exit 1
fi

if [[ "$GOBUILDTIMELOGFILE" != "" ]]; then
	echo $(LC_TIME=C date) start make.bash >"$GOBUILDTIMELOGFILE"
fi

# Test for Windows.
case "$(uname)" in
*MINGW* | *WIN32* | *CYGWIN*)
	echo 'ERROR: Do not use make.bash to build on Windows.'
	echo 'Use make.bat instead.'
	echo
	exit 1
	;;
esac

goto fail
L155:del .\cmd\dist\dist.exe
L156:goto :eof
L157:
L158::: DO NOT ADD ANY NEW CODE HERE.
L159::: The bootstrap+del above are the final step of make.bat.
L160::: If something must be added, add it to cmd/dist's cmdbootstrap,
L161::: to avoid needing three copies in three different shell languages
L162::: (make.bash, make.bat, make.rc).
L163:
L164::copydist
L165:mkdir "%GOTOOLDIR%" 2>NUL
L166:copy cmd\dist\dist.exe "%GOTOOLDIR%\"
L167:goto :eof
L168:
L169::nogoenv
L170:set GO111MODULE=off
...