if err := os.WriteFile(root.ConfFile, []byte(rootCAConf), os.ModePerm); err != nil {
		return Root{}, err
	}

	// Create the root key.
	if err := cert.GenerateKey(root.KeyFile); err != nil {
		return Root{}, err
	}

	// Create the root CSR
	if err := cert.GenerateCSR(root.ConfFile, root.KeyFile, root.CSRFile); err != nil {
		return Root{}, err
	}

	// Create the root cert

root.b...

// limitations under the License.

package main

import (
	"flag"

	"github.com/spf13/cobra"

	"istio.io/istio/pkg/collateral"
	"istio.io/istio/pkg/version"
)

// getRootCmd returns the root of the cobra command-tree.
func getRootCmd(args []string) *cobra.Command {
	rootCmd := &cobra.Command{
		Use:   "operator",
		Short: "The Istio operator.",
		Args:  cobra.ExactArgs(0),

    <orderEntry type="module-library" scope="RUNTIME">
      <library>
        <CLASSES>
          <root url="jar://$CUSTOM_DIR$/../cache/junit/junit/jars/junit-4.7.jar!/"/>
        </CLASSES>
        <JAVADOC/>
        <SOURCES>
          <root url="jar://$CUSTOM_DIR$/../cache/junit/junit/sources/junit-4.7-sources.jar!/"/>
        </SOURCES>
      </library>
    </orderEntry>
  </component>

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          check-latest: true
      - name: Start root lockdown tests
        run: |

}

func addFlags(cmd *cobra.Command, rootArgs *RootArgs) {
	cmd.PersistentFlags().BoolVarP(&rootArgs.DryRun, "dry-run", "",
		false, "Console/log output only, make no changes.")
}

// GetRootCmd returns the root of the cobra command-tree.
func GetRootCmd(ctx cli.Context, args []string) *cobra.Command {
	rootCmd := &cobra.Command{
		Use:          "mesh",
		Short:        "Command line Istio install utility.",
		SilenceUsage: true,

  </component>
  <component name="Encoding" useUTFGuessing="true" native2AsciiForPropertiesFiles="false"/>
  <component name="GradleUISettings">
    <setting name="root"/>
  </component>
  <component name="GradleUISettings2">
    <setting name="root"/>
  </component>
  <component name="IdProvider" IDEtalkID="11DA1DB66DD62DDA1ED602B7079FE97C"/>
  <component name="JavadocGenerationManager">
    <option name="OUTPUT_DIRECTORY"/>

  </component>
  <component name="Encoding" useUTFGuessing="true" native2AsciiForPropertiesFiles="false"/>
  <component name="GradleUISettings">
    <setting name="root"/>
  </component>
  <component name="GradleUISettings2">
    <setting name="root"/>
  </component>
  <component name="IdProvider" IDEtalkID="11DA1DB66DD62DDA1ED602B7079FE97C"/>
  <component name="JavadocGenerationManager">
    <option name="OUTPUT_DIRECTORY"/>

}

// Parses a map in the yaml file
func readMap(m map[any]any, path []string) []string {
	var labels []string
	for k, v := range m {
		// If we see "values," then the element is a root and we shouldn't put it in our label name
		if k == "values" {
			labels = append(labels, readVal(v, path)...)
		} else {
			if len(path) > 0 || k.(string) != "features" {
				path = append(path, k.(string))
			}

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package root

import (
	"istio.io/istio/pkg/env"
	"istio.io/istio/pkg/log"
)

const (
	// Location to read istioctl defaults from
	defaultIstioctlConfig = "$HOME/.istioctl/config.yaml"
)

var (