if len(matchConditions) > 0 {
		matchExpressionAccessors := make([]cel.ExpressionAccessor, len(matchConditions))
		for i := range matchConditions {
			matchExpressionAccessors[i] = (*matchconditions.MatchCondition)(&matchConditions[i])
		}

	AuditAnnotations []AuditAnnotationApplyConfiguration             `json:"auditAnnotations,omitempty"`
	MatchConditions  []MatchConditionApplyConfiguration              `json:"matchConditions,omitempty"`
	Variables        []VariableApplyConfiguration                    `json:"variables,omitempty"`
}

	AuditAnnotations []AuditAnnotationApplyConfiguration              `json:"auditAnnotations,omitempty"`
	MatchConditions  []MatchConditionApplyConfiguration               `json:"matchConditions,omitempty"`
	Variables        []VariableApplyConfiguration                     `json:"variables,omitempty"`
}

	FailurePolicy    *admissionregistrationv1.FailurePolicyType `json:"failurePolicy,omitempty"`
	AuditAnnotations []AuditAnnotationApplyConfiguration        `json:"auditAnnotations,omitempty"`
	MatchConditions  []MatchConditionApplyConfiguration         `json:"matchConditions,omitempty"`
	Variables        []VariableApplyConfiguration               `json:"variables,omitempty"`
}

	ReinvocationPolicy      *admissionregistrationv1.ReinvocationPolicyType `json:"reinvocationPolicy,omitempty"`
	MatchConditions         []MatchConditionApplyConfiguration              `json:"matchConditions,omitempty"`
}

// MutatingWebhookApplyConfiguration constructs an declarative configuration of the MutatingWebhook type for use with
// apply.

	AdmissionReviewVersions []string                                        `json:"admissionReviewVersions,omitempty"`
	MatchConditions         []MatchConditionApplyConfiguration              `json:"matchConditions,omitempty"`
}

// ValidatingWebhookApplyConfiguration constructs an declarative configuration of the ValidatingWebhook type for use with
// apply.

	AdmissionReviewVersions []string                                   `json:"admissionReviewVersions,omitempty"`
	MatchConditions         []MatchConditionApplyConfiguration         `json:"matchConditions,omitempty"`
}

// ValidatingWebhookApplyConfiguration constructs an declarative configuration of the ValidatingWebhook type for use with
// apply.

	// current RuntimeCELCostBudget gives roughly 1 seconds for the validation
	RuntimeCELCostBudget = 10000000

	// RuntimeCELCostBudgetMatchConditions is the overall cost budget for runtime CEL validation cost on matchConditions per object with matchConditions
	// this is per webhook for validatingwebhookconfigurations and mutatingwebhookconfigurations or per ValidatingAdmissionPolicyBinding

	ReinvocationPolicy      *admissionregistrationv1beta1.ReinvocationPolicyType `json:"reinvocationPolicy,omitempty"`
	MatchConditions         []MatchConditionApplyConfiguration                   `json:"matchConditions,omitempty"`
}

// MutatingWebhookApplyConfiguration constructs an declarative configuration of the MutatingWebhook type for use with
// apply.

	"time"

	"k8s.io/component-base/metrics"
	"k8s.io/component-base/metrics/legacyregistry"
)

// MatcherMetrics defines methods for reporting matchCondition metrics
type MatcherMetrics interface {
	// RecordAuthorizationMatchConditionEvaluation records the total time taken to evaluate matchConditions for an Authorize() call to the given authorizer