// This is primarily to support PSP annotations.
  google.protobuf.Struct injectedAnnotations = 19;

  // Enable objectSelector to filter out pods with no need for sidecar before calling istio-sidecar-injector.
  google.protobuf.Struct objectSelector = 21;

  // Configure the injection url for sidecar injector webhook
  string injectionURL = 22;

{{- range .Values.global.imagePullSecrets }} - name: {{ . }} {{- end }} {{- end }} --- apiVersion: admissionregistratio.k8s.io/v1beta1 kind: MutatingWebhookConfi metadata: name: istio-sidecar-injector-1-6-11 labels: istio.io/rev: 1-6-11 app: sidecar-injector release: istio webhooks: - name: sidecar-injector.istio.io clientConfig: service: name: istiod-1-6-11 namespace: istio-system path: "/inject" caBundle: "" sideEffects: None rules: - operations: [ "CREATE" ] apiGroups: [""] apiVersions: ["v1"]...

imagePullSecrets: {{- range .Values.global.imagePullSecrets }} - name: {{ . }} {{- end }} {{- end }} --- apiVersion: admissionregistratio.k8s.io/v1beta1 kind: MutatingWebhookConfi metadata: name: istio-sidecar-injector-1-7-6 labels: istio.io/rev: 1-7-6 app: sidecar-injector release: istio webhooks: - name: sidecar-injector.istio.io clientConfig: service: name: istiod-1-7-6 namespace: istio-system path: "/inject" caBundle: "" sideEffects: None rules: - operations: [ "CREATE" ] apiGroups: [""] apiVersions: ["v1"] resources:...

}} - name: {{ . }} {{- end }} {{- end }} --- apiVersion: admissionregistratio.k8s.io/v1beta1 kind: MutatingWebhookConfi metadata: name: istio-sidecar-injector-1-8-6 labels: istio.io/rev: 1-8-6 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" app: sidecar-injector release: istio webhooks: - name: sidecar-injector.istio.io clientConfig: service: name: istiod-1-8-6 namespace: istio-system path: "/inject" caBundle: "" sideEffects: None rules: - operations: [ "CREATE"...

securityContext: fsGroup: 1337 {{- end }} --- apiVersion: admissionregistratio.k8s.io/v1 kind: MutatingWebhookConfi metadata: name: istio-sidecar-injector-1-10-0 labels: istio.io/rev: 1-10-0 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" app: sidecar-injector release: istio webhooks: - name: rev.namespace.sidecar-injector.istio.io clientConfig: service: name: istiod-1-10-0 namespace: istio-system path: "/inject" port: 443 caBundle: "" sideEffects: None rules: -...

        failure.assertHasCause("Services of type ${serviceType.simpleName} are not available for injection into instances of type BuildService.")

        where:
        serviceType << [
            ProjectLayout, // not isolated
            Instantiator, // internal
        ]
    }

    def "injected FileSystemOperations resolves paths relative to build root directory"() {
        serviceCopiesFiles()

securityContext: fsGroup: 1337 {{- end }} --- apiVersion: admissionregistratio.k8s.io/v1beta1 kind: MutatingWebhookConfi metadata: name: istio-sidecar-injector-1-9-5 labels: istio.io/rev: 1-9-5 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" app: sidecar-injector release: istio webhooks: - name: sidecar-injector.istio.io clientConfig: service: name: istiod-1-9-5 namespace: istio-system path: "/inject" caBundle: "" sideEffects: None rules: - operations: [ "CREATE"...

            if (lifecycleBindingsInjector == null) {
                throw new IllegalStateException("lifecycle bindings injector is missing");
            }

            // lifecycle bindings injection
            resultModel = lifecycleBindingsInjector.injectLifecycleBindings(resultModel, request, problems);
        }

        // dependency management import

            if (lifecycleBindingsInjector == null) {
                throw new IllegalStateException("lifecycle bindings injector is missing");
            }

            // lifecycle bindings injection
            lifecycleBindingsInjector.injectLifecycleBindings(resultModel, request, problems);
        }

        // dependency management import

====
<1> services can't be injected directly in scripts, we need an extra type to convey the injection point
<2> create an instance of the extra type using `project.object` outside the task action
<3> no more problem reported, the task action references `injected` that provides the `FileSystemOperations` service, supported as a replacement for `project.copy {}`