"alwaysInjectSelector"
"injectedAnnotations"
"kind: CronJob"
"kind: DaemonSet"
"kind: Deployment"
"kind: DeploymentConfig"
"kind: IstioOperator"
"kind: List"
"kind: Service"
"apiVersion: apps/v1"
"apiVersion: apps.openshift.io/v1"
"apiVersion: batch/v2alpha1"
"apiVersion: install.istio.io/v1alpha1"

    operator.istio.io/component: "Cni"
rules:
- apiGroups: [""]
  resources: ["pods","nodes","namespaces"]
  verbs: ["get", "list", "watch"]
{{- if (eq .Values.platform "openshift") }}
- apiGroups: ["security.openshift.io"]
  resources: ["securitycontextconstraints"]
  resourceNames: ["privileged"]
  verbs: ["use"]
{{- end }}
---
{{- if .Values.cni.repair.enabled }}
apiVersion: rbac.authorization.k8s.io/v1

apiVersion: release-notes/v2
kind: bug-fix
area: documentation
releaseNotes:
- |

That is, `--set some.field=true` should be passed, not `--set defaults.some.field=true`.

### OpenShift

When deploying the gateway in an OpenShift cluster, use the `openshift` profile to override the default values, for example:

```console
helm install istio-ingressgateway istio/gateway --set profile=openshift
```

### `image: auto` Information

The image used by the chart, `auto`, may be unintuitive.

apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
  - 43632
  - 45034
releaseNotes:
- |

    spec:
      selector:
        app: hello
        tier: frontend
      ports:
        - protocol: "TCP"
          port: 80
          targetPort: 80
      type: LoadBalancer

  - apiVersion: apps.openshift.io/v1
    kind: DeploymentConfig
    metadata:
      name: hello
    spec:
      replicas: 7
      template:
        metadata:
          labels:
            app: hello
            tier: backend

			}
		}

		ff.Arches = append(ff.Arches, fa)
	}

	return &ff, nil
}

// OpenFat opens the named file using [os.Open] and prepares it for use as a Mach-O
// universal binary.
func OpenFat(name string) (*FatFile, error) {
	f, err := os.Open(name)
	if err != nil {
		return nil, err
	}
	ff, err := NewFatFile(f)
	if err != nil {
		f.Close()

	}, nil)
	if err != nil {
		t.Fatal(err)
	}

	var sniCerts []SNICertKeyContentProvider
	certSpecs := []testCertSpec{
		{
			host:  "172.30.0.1",
			ips:   []string{"172.30.0.1"},
			names: []string{"openshift", "openshift.default.svc.cluster.local"},
		},
		{
			host:  "127.0.0.1",
			ips:   []string{"127.0.0.1"},
			names: []string{"localhost"},
		},
		{
			host:  "2001:abcd:bcda::1",

				{Verbs: []string{"list"}, APIGroups: []string{"", "builds.openshift.io"}, Resources: []string{"builds"}},
			},
			Expected: []rbacv1.PolicyRule{
				{Verbs: []string{"get"}, APIGroups: []string{"", "builds.openshift.io"}, Resources: []string{"builds"}},
				{Verbs: []string{"list"}, APIGroups: []string{"", "builds.openshift.io"}, Resources: []string{"builds"}},
			},

// license that can be found in the LICENSE file.

//go:build openbsd && !mips64

package syscall

import _ "unsafe"

// used by internal/syscall/unix
//go:linkname unlinkat
//go:linkname openat
//go:linkname fstatat