- gofumpt
  - gci
  fast: false
linters-settings:
  gci:
    sections:
      - standard # Captures all standard packages if they do not match another section.
      - default # Contains all imports that could not be matched to another section type.
      - prefix(istio.io/) # Groups all imports with the specified Prefix.
  goimports:
    # put imports beginning with prefix after 3rd-party packages;
    # it's a comma-separated list of prefixes

    app: sidecar-injector
    release: {{ .Release.Name }}
webhooks:
{{- /* Set up the selectors. First section is for revision, rest is for "default" revision */}}

{{- /* Case 1: namespace selector matches, and object doesn't disable */}}
{{- /* Note: if both revision and legacy selector, we give precedence to the legacy one */}}
{{- include "core" (mergeOverwrite (deepCopy $whv) (dict "Prefix" "rev.namespace.") ) }}

                  description: A label selector is a label query over a set of resources.
                    The result of matchLabels and matchExpressions are ANDed. An empty
                    label selector matches all objects. A null label selector matches
                    no objects.
                  properties:
                    matchExpressions:
                      description: matchExpressions is a list of label selector requirements.

                type: string
              subjectAltNames:
                description: If specified, the proxy will verify that the server certificate's
                  subject alternate name matches one of the specified values.
                items:
                  type: string
                type: array
              workloadSelector:
                description: Applicable only for MESH_INTERNAL services.

               "name": "default",
               "domains": [
                "*"
               ],
               "routes": [
                {
                 "match": {
                  "connect_matcher": {}
                 },
                 "route": {
                  "cluster": "main_internal",
                  "upgrade_configs": [
                   {
                    "upgrade_type": "CONNECT",

*.lclstage.dev *.linodeobjects.com *.magentosite.cloud *.migration.run *.mm *.moonscale.io *.nagoya.jp *.nodebalancer.linode.com *.nom.br *.northflank.app *.np *.oci.customer-oci.com *.ocp.customer-oci.com *.ocs.customer-oci.com *.on-acorn.io *.on-k3s.io *.on-rancher.cloud *.on-rio.io *.otap.co *.owo.codes *.paywhirl.com *.pg *.platformsh.site *.quipelements.com *.r.appspot.com *.rss.my.id *.s5y.io *.sapporo.jp *.sch.uk *.sendai.jp *.sensiosite.cloud *.spectrum.myjino.ru *.statics.cloud *.stg-builder.code.com...

    app: sidecar-injector
    release: {{ .Release.Name }}
webhooks:
{{- /* Set up the selectors. First section is for revision, rest is for "default" revision */}}

{{- /* Case 1: namespace selector matches, and object doesn't disable */}}
{{- /* Note: if both revision and legacy selector, we give precedence to the legacy one */}}
{{- include "core" (mergeOverwrite (deepCopy $whv) (dict "Prefix" "rev.namespace.") ) }}

array resolution: description: Service resolution mode for the hosts. enum: - NONE - STATIC - DNS - DNS_ROUND_ROBIN type: string subjectAltNames: description: If specified, the proxy will verify that the server certificate's subject alternate name matches one of the specified values. items: type: string type: array workloadSelector: description: Applicable only for MESH_INTERNAL services. properties: labels: additionalProperties: type: string description: One or more labels that indicate a specific...

                type: string
              subjectAltNames:
                description: If specified, the proxy will verify that the server certificate's
                  subject alternate name matches one of the specified values.
                items:
                  type: string
                type: array
              workloadSelector:
                description: Applicable only for MESH_INTERNAL services.

    check-exported: false
  gci:
    sections:
      - standard # Captures all standard packages if they do not match another section.
      - default # Contains all imports that could not be matched to another section type.
      - prefix(istio.io/) # Groups all imports with the specified Prefix.
  gocritic:
    # Disable all checks.
    # Default: false
    disable-all: true