readonly CLOUD_CONFIG_OPT=--cloud-config=/etc/gce.conf
readonly CA_CERT_BUNDLE_PATH=/foo/bar
readonly APISERVER_SERVER_CERT_PATH=/foo/bar
readonly APISERVER_SERVER_KEY_PATH=/foo/bar
readonly APISERVER_CLIENT_CERT_PATH=/foo/bar
readonly CLOUD_CONFIG_MOUNT="{\"name\": \"cloudconfigmount\",\"mountPath\": \"/etc/gce.conf\", \"readOnly\": true},"

apiVersion: v1
kind: Service
metadata:
  name: gce-metadata-server
  labels:
    app: gce-metadata
spec:
  # Use LB service so it can be reached cross cluster
  type: LoadBalancer
  ports:
  - name: http
    port: 8080
  - name: http-vm
    port: 8081
  selector:
    app: gce-metadata
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gce-metadata-server
spec:
  replicas: 1
  selector:

# GCE Cluster addons

These cluster add-ons are specific to GCE and GKE clusters. The GCE-specific addon directory is
merged with the general cluster addon directory at release, so addon paths (relative to the addon
directory) must be unique across the 2 directory structures.

	// Metadata Server.
	Address() string
	// Address is the IP Address of the service provided by the fake GCE
	// Metadata Server to be used for "VM" instances
	AddressVM() string
}

// Config defines the options for creating an fake GCE Metadata Server component.
type Config struct {
	// Cluster to be used in a multicluster environment
	Cluster cluster.Cluster
}

// New returns a new instance of stackdriver.

	if err != nil {
		t.Error("Unexpected error retrieving volumes by access modes:", err)
	}
	sort.Sort(byCapacity{volumes})

	for i, expected := range []string{"gce-pd-1", "gce-pd-5", "gce-pd-10"} {
		if string(volumes[i].UID) != expected {
			t.Errorf("Incorrect ordering of persistent volumes.  Expected %s but got %s", expected, volumes[i].UID)
		}
	}

// Here is how you would inject a cloud provider, first
// you would use a init() method in say "k8s.io/legacy-cloud-providers/gce"
// package that calls `cloudprovider.RegisterCloudProvider()`
// and then here in this file you would add an import.
//

		identityProvider string
		expectedErr      string
		expectedToken    string
		expectedIdp      string
	}{
		"gce test": {
			fetcherType:      security.GCE,
			trustdomain:      "abc.svc.id.goog",
			jwtPath:          "/var/run/secrets/tokens/istio-token",
			identityProvider: security.GCE,
			expectedErr:      "", // No error when ID token auth is enabled.
			expectedToken:    "",
			expectedIdp:      "GoogleComputeEngine",

//
// * The cloudproviders have the own names: GCE has InstanceName, AWS has InstanceId.
//
//	For GCE, InstanceName is the Name of an Instance object in the GCE API.  On GCE, Instance.Name becomes the
//	Hostname, and thus it makes sense also to use it as the Node.Name.  But that is GCE specific, and it is up
//	to the cloudprovider how to do this mapping.
//

# limitations under the License.

# Due to the GCE custom metadata size limit, we split the entire script into two
# files configure.sh and configure-helper.sh. The functionality of downloading
# kubernetes configuration, manifests, docker images, and binary files are
# put in configure.sh, which is uploaded via GCE custom metadata.

set -o errexit
set -o pipefail
set -o nounset

		csiMigrationResult            bool
		csiMigrationCompleteResult    bool
	}{
		{
			name:                          "gce-pd migration flag enabled and migration-complete flag disabled with CSI migration flag",
			pluginName:                    "kubernetes.io/gce-pd",
			pluginFeatureEnabled:          true,
			csiMigrationEnabled:           true,
			inTreePluginUnregister:        features.InTreePluginGCEUnregister,