return
	}
	if dc.IsNil() {
		err = dc.ReadNil()
		if err != nil {
			err = msgp.WrapError(err)
			return
		}
		z.Checksum = nil
	} else {
		z.Checksum, err = dc.ReadBytes(z.Checksum)
		if err != nil {
			err = msgp.WrapError(err, "Checksum")
			return
		}
	}
	z.Versioned, err = dc.ReadBool()
	if err != nil {
		err = msgp.WrapError(err, "Versioned")
		return
	}

	if _, ok := opts.ObjectAttributes[xhttp.Checksum]; ok {
		chkSums := objInfo.decryptChecksums(0, r.Header)
		// AWS does not appear to append part number on this API call.
		switch {
		case chkSums["CRC32"] != "":
			OA.Checksum = new(objectAttributesChecksum)
			OA.Checksum.ChecksumCRC32 = strings.Split(chkSums["CRC32"], "-")[0]
		case chkSums["CRC32C"] != "":
			OA.Checksum = new(objectAttributesChecksum)

			headers:            map[string]string{"x-amz-checksum-crc32": checksumData(bytesData, crc32.New(crc32.IEEETable))},
			data:               bytesData,
			dataLen:            len(bytesData),
			accessKey:          credentials.AccessKey,
			secretKey:          credentials.SecretKey,
			expectedRespStatus: http.StatusOK,
			wantHeaders:        map[string]string{"x-amz-checksum-crc32": checksumData(bytesData, crc32.New(crc32.IEEETable))},

//	    Deprecated string        // deprecation message, if any (with -u)
//	    Error      *ModuleError  // error loading module
//	    Sum        string        // checksum for path, version (as in go.sum)
//	    GoModSum   string        // checksum for go.mod (as in go.sum)
//	    Origin     any           // provenance of module
//	    Reuse      bool          // reuse of old module info is safe
//	}
//

			meta[validSSEReplicationHeaders[k]] = v
		} else {
			meta[k] = v
		}
	}

	if len(objInfo.Checksum) > 0 {
		// Add encrypted CRC to metadata for SSE-C objects.
		if isSSEC {
			meta[ReplicationSsecChecksumHeader] = base64.StdEncoding.EncodeToString(objInfo.Checksum)
		} else {
			for k, v := range getCRCMeta(objInfo, 0, nil) {
				meta[k] = v
			}
		}
	}

      labels:
        app.kubernetes.io/name: grafana
        app.kubernetes.io/instance: grafana
        sidecar.istio.io/inject: "false"
      annotations:
        checksum/config: 68c00ea91b7ba5c04efc55555ef2307f52aaf738b04e9665e91bb756c8f32b22
        checksum/sc-dashboard-provider-config: e70bf6a851099d385178a76de9757bb0bef8299da6d8443602590e44f05fdf24
        kubectl.kubernetes.io/default-container: grafana
    spec:
      

		return nil, fmt.Errorf("services have not yet been read at least once, cannot construct envvars")
	}

	var result []kubecontainer.EnvVar
	// Note:  These are added to the docker Config, but are not included in the checksum computed
	// by kubecontainer.HashContainer(...).  That way, we can still determine whether an
	// v1.Container is already running by its hash. (We don't want to restart a container just
	// because some service changed.)