// Putting the key protect us from returning a 404 response instead of a 503.
// It is especially important for controllers like GC and NS since they act on 404s.
//
// The presence of the key is checked in the NotFoundHandler (staging/src/k8s.io/apiserver/pkg/util/notfoundhandler/not_found_handler.go)
//

This directory contains samples showing how to enable pods to contact a few well
known services.

If Istio is not configured to allow pods to contact external services, the pods will
see errors such as 404s, HTTPS connection problems, and TCP connection problems.  If
ServiceEntries are misconfigured pods may see problems with server names.

## Try it out

After an operator runs `kubectl create -f aptget.yaml` pods will be able to

	// This looks a bit bonkers, but here's what's happening.  We need to have /apis handling registered in gorestful in order to have
	// swagger generated for compatibility.  Doing that with `/apis` as a webservice, means that it forcibly 404s (no defaulting allowed)
	// all requests which are not /apis or /apis/.  We need those calls to fall through behind gorestful for proper delegation.  Trying to

  - name: "GatewayDuplicateCertificate"
    code: IST0138
    level: Warning
    description: "Duplicate certificate in multiple gateways may cause 404s if clients re-use HTTP2 connections."
    template: "Duplicate certificate in multiple gateways %v may cause 404s if clients re-use HTTP2 connections."
    args:
      - name: gateways
        type: "[]string"

  - name: "InvalidWebhook"
    code: IST0139

	// Description: Duplicate certificate in multiple gateways may cause 404s if clients re-use HTTP2 connections.
	GatewayDuplicateCertificate = diag.NewMessageType(diag.Warning, "IST0138", "Duplicate certificate in multiple gateways %v may cause 404s if clients re-use HTTP2 connections.")

	// InvalidWebhook defines a diag.MessageType for message "InvalidWebhook".

	SYS_MKDIR                  = 4039
	SYS_RMDIR                  = 4040
	SYS_DUP                    = 4041
	SYS_PIPE                   = 4042
	SYS_TIMES                  = 4043
	SYS_PROF                   = 4044
	SYS_BRK                    = 4045
	SYS_SETGID                 = 4046
	SYS_GETGID                 = 4047
	SYS_SIGNAL                 = 4048
	SYS_GETEUID                = 4049
	SYS_GETEGID                = 4050

	SYS_RMDIR                        = 4040
	SYS_DUP                          = 4041
	SYS_PIPE                         = 4042
	SYS_TIMES                        = 4043
	SYS_PROF                         = 4044
	SYS_BRK                          = 4045
	SYS_SETGID                       = 4046
	SYS_GETGID                       = 4047
	SYS_SIGNAL                       = 4048
	SYS_GETEUID                      = 4049

	SYS_RMDIR                        = 4040
	SYS_DUP                          = 4041
	SYS_PIPE                         = 4042
	SYS_TIMES                        = 4043
	SYS_PROF                         = 4044
	SYS_BRK                          = 4045
	SYS_SETGID                       = 4046
	SYS_GETGID                       = 4047
	SYS_SIGNAL                       = 4048
	SYS_GETEUID                      = 4049

	SYS_MKDIR                  = 4039
	SYS_RMDIR                  = 4040
	SYS_DUP                    = 4041
	SYS_PIPE                   = 4042
	SYS_TIMES                  = 4043
	SYS_PROF                   = 4044
	SYS_BRK                    = 4045
	SYS_SETGID                 = 4046
	SYS_GETGID                 = 4047
	SYS_SIGNAL                 = 4048
	SYS_GETEUID                = 4049
	SYS_GETEGID                = 4050

			return x + 2
		}; y(40) != 42 { // ERROR "inlining call to main.func4"
			ppanic("y(40) != 42")
		}
	}

	{
		y := func(x int) int { // ERROR "can inline main.func5" "func literal does not escape"
			return x + 2
		}
		y = func(x int) int { // ERROR "can inline main.func6" "func literal does not escape"
			return x + 1
		}
		if y(40) != 41 {
			ppanic("y(40) != 41")
		}
	}

	{