anchor.diff:  RUN make
   RUN cp -a su-exec ${OUTDIR}/usr/bin
   
  +ADD https://github.com/GoogleContainerTools/kpt/releases/download/${KPT_VERSION}/kpt_linux_${TARGETARCH} ${OUTDIR}/usr/bin/kpt
  +RUN chmod 555 ${OUTDIR}/usr/bin/kpt
  +
   # Install gcloud command line tool
   # Install gcloud beta components
   RUN set -eux; \
  -    \
  -    case $(uname -m) in \
  -        x86_64) \
  -            export GCLOUD_TAR_FILE=google-cloud-sdk-${GCLOUD_VERSION}-linux-x86_64.tar.gz; \
  -            ;; \
  -        aarch64) \
  -            export GCLOUD_TAR_FILE=google-cloud-sdk-${GCLOUD_VERSION}-linux-arm.tar.gz; \
  -            ;; \
  -        *) \
  -            echo "unsuport arch"; \
  -            exit 1; \
  -            ;; \
  -    esac; \
  -    \
  +    GCLOUD_TAR_FILE="google-cloud-sdk-${GCLOUD_VERSION}-linux-$(uname -m).tar.gz"; \
       wget "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/${GCLOUD_TAR_FILE}"; \
  -    tar -xzvf ./${GCLOUD_TAR_FILE} -C ${OUTDIR}/usr/local && rm ${GCLOUD_TAR_FILE}; \
  -    ${OUTDIR}/usr/local/google-cloud-sdk/bin/gcloud components install beta kpt --quiet; \
  +    tar -xzvf ."/${GCLOUD_TAR_FILE}" -C "${OUTDIR}/usr/local" && rm "${GCLOUD_TAR_FILE}"; \
       rm -rf /usr/local/google-cloud-sdk/.install/.backup
   
   # Cleanup stuff we don't need in the final image
  
positive.code:     mv /tmp/hugo ${OUTDIR}/usr/bin
  
  # Helm version 3
  ARG TARGETARCH
  ADD https://get.helm.sh/helm-${HELM3_VERSION}-linux-${TARGETARCH}.tar.gz /tmp
  RUN mkdir /tmp/helm3
  RUN tar -xf /tmp/helm-${HELM3_VERSION}-linux-${TARGETARCH}.tar.gz -C /tmp/helm3
  
negative.code: ARG GOLANG_IMAGE=golang:1.16.5
  # hadolint ignore=DL3006
  FROM ${GOLANG_IMAGE} as binary_tools_context
  # TARGETARCH is an automatic platform ARG enabled by Docker BuildKit.
  ARG TARGETARCH
  
  # Istio tools SHA that we use for this image
  ARG ISTIO_TOOLS_SHA
  