namespace: {{ .Values.global.istioNamespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
rules:
# permissions to verify the webhook is ready and rejecting
# invalid config. We use --server-dry-run so no config is persisted.
- apiGroups: ["networking.istio.io"]
  verbs: ["create"]
  resources: ["gateways"]

# For storing CA secret
- apiGroups: [""]
  resources: ["secrets"]

	"istio.io/istio/istioctl/pkg/cli"
	"istio.io/istio/pkg/kube"
	"istio.io/istio/pkg/test/env"
)

func TestProfileList(t *testing.T) {
	g := NewWithT(t)
	args := []string{"profile", "list", "--dry-run", "--manifests", filepath.Join(env.IstioSrc, "manifests")}

	kubeClientFunc = func() (kube.CLIClient, error) {
		return nil, nil
	}
	rootCmd := GetRootCmd(cli.NewFakeContext(&cli.NewFakeContextOption{
		Version: "25",

	// DryRun performs all steps except actually applying the manifests or creating output dirs/files.
	DryRun bool
}

func addFlags(cmd *cobra.Command, rootArgs *RootArgs) {
	cmd.PersistentFlags().BoolVarP(&rootArgs.DryRun, "dry-run", "",
		false, "Console/log output only, make no changes.")
}

// GetRootCmd returns the root of the cobra command-tree.
func GetRootCmd(ctx cli.Context, args []string) *cobra.Command {
	rootCmd := &cobra.Command{

"istio-extension-dashboard.json" echo -e "\n---\n" kubectl create configmap -n istio-system istio-grafana-dashboards \ --dry-run=client -oyaml \ --from-file=pilot-dashboard.json="${TMP}/pilot-dashboard.json" \ --from-file=istio-performance-dashboard.json="${TMP}/istio-performance-dashboard.json" echo -e "\n---\n" kubectl create configmap -n istio-system istio-services-grafana-dashboards \ --dry-run=client -oyaml \ --from-file=istio-workload-dashboard.json="${TMP}/istio-workload-dashboard.json" \ --from-f...