# Instead, we build a fresh copy of the binary with known settings.
go build -o $WORK/new/bin/go$GOEXE cmd/go &
go build -trimpath -o $WORK/bin/check$GOEXE check.go &
wait

env TESTGOROOT=$GOROOT
env GOROOT=

# Relocated Executable
exec $WORK/bin/check$GOEXE $WORK/new/bin/go$GOEXE $TESTGOROOT

# Relocated Tree:
# If the binary is sitting in a bin dir next to ../pkg/tool, that counts as a GOROOT,

	"strings"

	"k8s.io/apimachinery/pkg/types"

	"istio.io/istio/pkg/env"
	"istio.io/istio/pkg/log"
	"istio.io/istio/pkg/util/sets"
)

// Define security related features here.
var (
	// SkipValidateTrustDomain tells the server proxy to not to check the peer's trust domain when
	// mTLS is enabled in authentication policy.
	SkipValidateTrustDomain = env.Register(
		"PILOT_SKIP_VALIDATE_TRUST_DOMAIN",
		false,

# golang.org/issue/13037: 'go get' was not parsing <meta> tags in 404 served over HTTPS.

[!net:bazil.org] skip
[!git] skip

env GONOSUMDB=bazil.org,github.com,golang.org
env GO111MODULE=on
env GOPROXY=direct
go get bazil.org/fuse/fs/fstestutil


-- go.mod --
module m

# Test that we pass -arch flag to C compiler on Darwin (issue 43692).

[!GOOS:darwin] skip
[!cgo] skip

# clear CC, in case user sets it
env CC=

env CGO_ENABLED=1

env GOARCH=amd64
go build -n -x c.go
stderr 'clang.*-arch x86_64'

env GOARCH=arm64
go build -n -x c.go
stderr 'clang.*-arch arm64'

-- c.go --
package main

import "C"

		// the original
		assert.EventuallyEqual(t, env.NetworkManager.AllGateways, gateways)
		xdsUpdater.WaitOrFail(t, "xds full")
	})

	workingDNSServer.setFailure(true)
	gateways = env.NetworkManager.AllGateways()
	t.Run("resolution failed", func(t *testing.T) {
		xdsUpdater.AssertEmpty(t, 10*model.MinGatewayTTL)
		// the gateways should remain
		currentGateways := env.NetworkManager.AllGateways()

# that becomes the default.
[exec:clang] env CC=clang
[exec:gcc] env CC=gcc
[!exec:clang] [!exec:gcc] skip 'Unknown C compiler'

[!GOOS:windows] chmod 0755 $WORK/'program files'/clang
[!GOOS:windows] chmod 0755 $WORK/'program files'/gcc
[!GOOS:windows] exists -exec $WORK/'program files'/clang
[!GOOS:windows] exists -exec $WORK/'program files'/gcc
[!GOOS:windows] env PATH=$WORK/'program files':$PATH

# the defaults.
go vet .
env GOFLAGS='-tags=buggy'
! go vet .
stderr 'possible Printf formatting directive'

# Enabling one analyzer in GOFLAGS should disable the rest implicitly...
env GOFLAGS='-tags=buggy -unsafeptr'
go vet .

# ...but enabling one on the command line should not disable the analyzers
# enabled via GOFLAGS.
env GOFLAGS='-tags=buggy -printf'
! go vet -unsafeptr

env GO111MODULE=on

# GOPROXY file paths must provide the "file://" prefix explicitly.
env GOPROXY=$WORK/proxydir
! go list -versions -m golang.org/x/text
stderr 'invalid proxy URL.*proxydir'

[!net:proxy.golang.org] stop

# GOPROXY HTTPS paths may elide the "https://" prefix.
# (See golang.org/issue/32191.)
env GOPROXY=proxy.golang.org
env GOSUMDB=
go list -versions -m golang.org/x/text

-- go.mod --
module example.com
go 1.13

# The Git test covers common functionality.

# "fossil" is the Fossil file server on Plan 9.
[GOOS:plan9] skip
[!exec:fossil] skip
[short] skip
env GOBIN=$WORK/gopath/bin
env oldpath=$PATH
env HOME=$WORK
env USER=gopher
[!GOOS:windows] env fslckout=.fslckout
[GOOS:windows] env fslckout=_FOSSIL_
exec pwd
exec fossil init repo.fossil
cd repo/a

# If there's no local repository, there's no VCS info.
go install

// limitations under the License.

package features

import (
	"istio.io/istio/pkg/env"
)

// Define flags that affect XDS config generation here.
var (
	// EnableMysqlFilter enables injection of `envoy.filters.network.mysql_proxy` in the filter chain.
	// Pilot injects this outbound filter if the service port name is `mysql`.
	EnableMysqlFilter = env.Register(
		"PILOT_ENABLE_MYSQL_FILTER",
		false,