Run AWS CLI from a container image

So we don't have to install it, or Python.
Need to run in 'machine' executor on CircleCI so we can mount
volumes into the Docker command.

Update build tools including Go 1.16.2

See docs at https://golang.org/ref/mod#go-mod-file-go

The expected benefit from making this change is that the vendor
directory will be used automatically, including tests.

2.1.3 is very old, and seems to be failing the build

It doesn't fail the test

Avoids warnings like "Using 'getgrouplist' in statically linked
applications requires at runtime the shared libraries from the glibc
version used for linking"

We only want to force CGO_ENABLED when cross-compiling for arm;
it is on by default for native linux compilation and off by default
for darwin cross-compilation.

It calls 'go', which may not be present outside the build container

gvt replaced by Go modules; github-release not used in CI

Smaller that way, and more consistent

(Note we run it with GC enabled; it crashes in CI otherwise)

Scope itself doesn't have any Python code.

Disable Python test scheduler in CI
 - we set parallelism=1 so no point scheduling

All it does is set some environment variables so just set those on the command-line

Otherwise it's blank on Apple M1 platform (at least) and builds fail

Now we have to git-ignore .yarnrc file, which is created in the HOME dir.

This speeds up subsequent compilations

'delegated' says the container side is in charge, and Docker doesn't have to work hard to keep the host in sync

'z' is needed for SELinux

The command and arguments for yarn runs was repeated many times.

Remove complicated workaround in build.sh

* Bump alpine to 3.13.2

Remove obsolete dependency github.com/fatih/hclfmt

Update faq.md - fix read-only mode gotcha

* use double dashes for consistency
* fixup - says "set it to false", should be "true"
* fixup - the deployment and the daemonset both need this setting
Signed-off-by: Kingdon Barrett <kingdon@weave.works>

github.com/fatih/hclfmt was archived. Technically there is a possibility to fork (or used another forked version) to executle hclfmt.
But it leads to another issues - problems with importing https://github.com/hashicorp/hcl/hcl/printers. HCL was released in version 2 so that the file structure was changes.
I do not see any way to install it in changed Makefile. Go installs does not support pining to given tags so that always the newest version is installed.

For now, the impact on build process should be minimal. it is used only in ./tools/lint/lint() method. I was able to execute it locally without executing hclfmt.

fix CVE-2020-8203 (lodash vulnerability)

point out CoC more clearly

Signed-off-by: Daniel Holbach <daniel@weave.works>

Set hostname to Kubernetes node name

Non-portability is unlikely to be a problem