# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# shellcheck disable=SC2016
yq ea '. as $item ireduce ({}; . *d $item )' ./common/config/.golangci.yml ./tools/golangci-override.yaml > ./common/config/.golangci.yml.tmp

78bw3YeZuRkY5fEXmFf70248oxv+2MbIuJ0n1cU0hHOtHw6+BCC1q4yR5/iJ7YEX
jRbUacqhn9IxH9O8Bs7ntv6NaoHjUfskEiGyl1UZSAsFsd/Cp2Qu4Jmm0DHsvd+S
9oIO+EILiCvnGwcYfH4UFmNCx6S7JVOuNaFdgHUuo5dNDMj0hlt9krk3XfcCQ/YQ
K9pLL7WMDV5tvu437+UWUn0yZv6LkxcE33smqcHumrhwRtEfqAUbM1FHVteFZDCp
p3vBDAM=
-----END CERTIFICATE-----`)

// RotatedKey is a test cert for dynamic admission controller.

## Playbook: Major Version Upgrade

COMING SOON

## Tips and Tricks

For a quick (but messy) readout on what Istio versions are being used in this repo, run:

```bash
yq '.spec.generators[0].list.elements' < istio/control-plane-appset.yaml  && yq '.spec.source.helm.valuesObject.base.tags' < istio/tags.yaml && grep 'targetRevision' istio/*.yaml
```

[layout]: ./documentation/argo-reference-arch.svg "Repo Layout Diagram"

![s3a-config](https://github.com/minio/minio/blob/master/docs/bigdata/images/image5.png?raw=true "custom core-site")

```
sudo pip install yq
alias kv-pairify='yq ".configuration[]" | jq ".[]" | jq -r ".name + \"=\" + .value"'
```

  fi

  KIND_WAIT_FLAG="--wait=180s"
  KIND_DISABLE_CNI="false"
  if [[ -n "${KUBERNETES_CNI:-}" ]]; then
    unset KIND_WAIT_FLAG
    KIND_DISABLE_CNI="true"
  fi

  # Create KinD cluster
  if ! (yq eval "${CONFIG}" --expression ".networking.disableDefaultCNI = ${KIND_DISABLE_CNI}" | \
    kind create cluster --name="${NAME}" -v4 --retain --image "${IMAGE}" ${KIND_WAIT_FLAG:+"$KIND_WAIT_FLAG"} --config -); then

45\267=]\007x=4\372e>\252\235\373\276\030\276\221\275\2763\000\276\202\007\301>H\037Y>\307;\006?QT\241=NY\\<\014\254@>P\031\217<l\023\340>\010\327+\276\212\240\305\276\371x7>$\350\037?I\332\262\276\361\307\031\276\275o\206>\355\217\016\276 \036\007>yQ\221=\372\204\207>#\301\214>\344\376\302\275y\024\261\2768\304+\276\260\n \276(\026\254>\300*\034=j\2142=[\023\233>\301\370\304\2766<0=\321\025\237>\264C\220\2765\301\330\276\274\027\252\276\n\331U\276\355\363\302>\214i\305\276\367`\273>\244\352\241...

HmVYBwbtNbdk4OuF0KWIiEYEExECAAYFAj0/+qAACgkQUjayHA8rmiNu6wCeLCCS
mh5ctT9Y8SqQKN0CiYx9QVUAoLiHOfWsBGQaO7KAbA0C/AHcuknTiEYEExECAAYF
Aj1PxtwACgkQMWOnoF5x04MIOACdGVU2DqhD6p/riXG/V/rUX1ZMICQAniP9/+yQ
tIuFT9KAI8e+HSmTSRhCiEYEExECAAYFAj2A8jEACgkQ9NFx6XN42CXm7wCbBUep
dr/1MWAOEn4gUyUM691Wj5QAnjgIxhu8DyOAMygGZ4rvGylRSuGniEYEEBECAAYF
Aj2A8jYACgkQCjsfFF7l57B+pACfRsVJ2aIpBXR9Mx5FWNnTvt1+LLwAn2IgkPYT

	# copy istio-discovery values, but apply some local customizations
	cp manifests/charts/istio-control/istio-discovery/values.yaml manifests/charts/istiod-remote/
	yq -i '.defaults.telemetry.enabled=false | .defaults.global.externalIstiod=true | .defaults.global.omitSidecarInjectorConfigMap=true | .defaults.pilot.configMap=false' manifests/charts/istiod-remote/values.yaml

00000330  ca 76 96 aa 4b d2 b9 d4  d7 c2 b0 be 2d 36 1b 0e  |.v..K.......-6..|
00000340  bd ea 84 7e c8 ec 0c 0d  8f 88 91 f2 26 56 38 42  |...~........&V8B|
00000350  67 ae f4 89 c0 63 9e ef  ef 59 71 86 20 0a 22 67  |g....c...Yq. ."g|
00000360  a5 c5 44 d6 51 d1 14 fc  62 73 df ed e1 f0 7e 10  |..D.Q...bs....~.|
00000370  81 16 03 03 00 04 0e 00  00 00                    |..........|
>>> Flow 3 (client to server)

[L���}�`k.�{V:��R��D����[fY4m��z�-b�%q�c+ws=�LT>�Ou���]mq2��[�X�v�͟�k�y��~�ݷ�����͋��'�w�!��f����_Y(�����1�G;EF�ȟ��~#,'��sS�/@�(�X`P,�U�����a��E߇�~Vk�=��яE�k�YQ���m�3��P<T(Rz���^gP|���5���ǐ����%v�o�sUq��c�Nv=��s�b��˻3�f'�r�\�[�H�E,+�-��ugz�ZC�8��4�/(�Z�Y��m��+�aZd&G�eE�S�s�E��WGyYOsə���s*���(`�ʐk)��tC?�N��	�|�Y0l����Q4��*r�P��n^� ����>?�1ـ��KH.���[Mq���+�wN�
F��9Q����}