steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          check-latest: true
      - name: Start root lockdown tests
        run: |

    # Refer to https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md#21-trust-domain
    trustDomain: "cluster.local"

    # The namespace to treat as the administrative root namespace for Istio configuration.
    # When processing a leaf namespace Istio will search for declarations in that namespace first

index $obj .Key | b64dec -}} {{- else -}} {{- randAlphaNum $len -}} {{- end -}} {{- end }} {{- define "minio.root.username" -}} {{- if .Values.rootUser }} {{- .Values.rootUser | toString }} {{- else }} {{- include "minio.getValueFromSecret" (dict "Namespace" .Release.Namespace "Name" (include "minio.fullname" .) "Length" 20 "Key" "rootUser") }} {{- end }} {{- end -}} {{- define "minio.root.password" -}} {{- if .Values.rootPassword }} {{- .Values.rootPassword | toString }} {{- else }} {{- include ...

index $obj .Key | b64dec -}} {{- else -}} {{- randAlphaNum $len -}} {{- end -}} {{- end }} {{- define "minio.root.username" -}} {{- if .Values.rootUser }} {{- .Values.rootUser | toString }} {{- else }} {{- include "minio.getValueFromSecret" (dict "Namespace" .Release.Namespace "Name" (include "minio.fullname" .) "Length" 20 "Key" "rootUser") }} {{- end }} {{- end -}} {{- define "minio.root.password" -}} {{- if .Values.rootPassword }} {{- .Values.rootPassword | toString }} {{- else }} {{- include ...

          expirationSeconds: 43200
          audience: {{ .Values.global.sds.token.aud }}
  {{- if eq .Values.global.pilotCertProvider "istiod" }}
  - name: istiod-ca-cert
    configMap:
      name: istio-ca-root-cert
  {{- end }}
  {{- if .Values.global.mountMtlsCerts }}
  # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
  - name: istio-certs
    secret:
      optional: true

        name: credential-socket
      - emptyDir: {}
        name: workload-certs
{{- if eq .Values.global.pilotCertProvider "istiod" }}
      - name: istiod-ca-cert
        configMap:
          name: istio-ca-root-cert
{{- end }}
      - name: podinfo
        downwardAPI:
          items:
            - path: "labels"
              fieldRef:
                fieldPath: metadata.labels
            - path: "annotations"

              audience: {{ .Values.global.sds.token.aud }}
      {{- if eq .Values.global.pilotCertProvider "istiod" }}
      - name: istiod-ca-cert
        configMap:
          name: istio-ca-root-cert
      {{- end }}
      {{- if .Values.global.imagePullSecrets }}
      imagePullSecrets:
        {{- range .Values.global.imagePullSecrets }}
        - name: {{ . }}
        {{- end }}
      {{- end }}

    # Refer to https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md#21-trust-domain
    trustDomain: "cluster.local"

    # The namespace to treat as the administrative root namespace for Istio configuration.
    # When processing a leaf namespace Istio will search for declarations in that namespace first

elasticbeanstalk.com elblag.pl elburg.museum elementor.cloud elementor.cool elk.pl elvendrell.museum elverum.no email emb.kw embaixada.st embetsu.hokkaido.jp embroidery.museum emerck emergency.aero emilia-romagna.it emiliaromagna.it emp.br empresa.bo emr.it en-root.fr en.it ena.gifu.jp encoreapi.com encr.app encyclopedic.museum endofinternet.net endofinternet.org endoftheinternet.org enebakk.no energy enf.br eng.br eng.pro engerdal.no engine.aero engineer engineer.aero engineering england.museum eniwa.hokkaido.jp...

services:
  mysql:
    image: 'mysql/mysql-server:latest'
    ports:
      - "9910:3306"
    environment:
      - MYSQL_DATABASE=gorm
      - MYSQL_USER=gorm
      - MYSQL_PASSWORD=gorm
      - MYSQL_RANDOM_ROOT_PASSWORD="yes"
  postgres:
    image: 'postgres:latest'
    ports:
      - "9920:5432"
    environment:
      - TZ=Asia/Shanghai
      - POSTGRES_DB=gorm
      - POSTGRES_USER=gorm