(*Match)(nil),         // 5: istio.security.Match
	(*Address)(nil),       // 6: istio.security.Address
	(*StringMatch)(nil),   // 7: istio.security.StringMatch
	(*emptypb.Empty)(nil), // 8: google.protobuf.Empty
}
var file_workloadapi_security_authorization_proto_depIdxs = []int32{
	0,  // 0: istio.security.Authorization.scope:type_name -> istio.security.Scope

	cases := []struct {
		name     string
		input    []*anypb.Any
		wantNack bool
	}{
		{
			name:     "wrong typed config",
			input:    []*anypb.Any{protoconv.MessageToAny(&emptypb.Empty{})},
			wantNack: true,
		},
		{
			name: "wrong value in typed struct",
			input: []*anypb.Any{protoconv.MessageToAny(&core.TypedExtensionConfig{
				Name: "wrong-input",

						{
							RequiresType: &envoy_jwt.JwtRequirement_ProviderName{
								ProviderName: name,
							},
						},
						{
							RequiresType: &envoy_jwt.JwtRequirement_AllowMissing{
								AllowMissing: &emptypb.Empty{},
							},
						},
					},
				},
			},
		})
		outterOrList = append(outterOrList, &envoy_jwt.JwtRequirement{
			RequiresType: &envoy_jwt.JwtRequirement_ProviderName{
				ProviderName: name,

			existingPods: []*v1.Pod{splitAzureDiskPod, nonApplicablePod, emptyPod},
			filterName:   azureDiskVolumeFilterType,
			maxVols:      3,
			test:         "existing pods' counts ignore non-AzureDisk volumes",
		},
		{
			newPod:       onePVCPod(azureDiskVolumeFilterType),
			existingPods: []*v1.Pod{splitAzureDiskPod, nonApplicablePod, emptyPod},
			filterName:   azureDiskVolumeFilterType,
			maxVols:      3,

	}

	// emptyPod is a stub containing empty object names
	emptyPod := &v1.Pod{
		Spec: v1.PodSpec{
			Containers: []v1.Container{{
				EnvFrom: []v1.EnvFromSource{{
					SecretRef: &v1.SecretEnvSource{
						LocalObjectReference: v1.LocalObjectReference{
							Name: ""}}}}}},
		},
	}
	VisitPodSecretNames(emptyPod, func(name string) bool {

	i := &p.Inst[p.Start]
	if i.Op != syntax.InstEmptyWidth || (syntax.EmptyOp(i.Arg))&syntax.EmptyBeginText == 0 {
		return "", i.Op == syntax.InstMatch, uint32(p.Start)
	}
	pc = i.Out
	i = &p.Inst[pc]
	for i.Op == syntax.InstNop {
		pc = i.Out
		i = &p.Inst[pc]
	}
	// Avoid allocation of buffer if prefix is empty.
	if iop(i) != syntax.InstRune || len(i.Rune) != 1 {

		t.Errorf("got different type set. got=%v, wanted=%v", objTypeMap, expectedObjTypeMap)
	}
	for exp, expType := range expectedObjTypeMap {
		actType, found := objTypeMap[exp]
		if !found {
			t.Errorf("missing type in rule types: %s", exp)
			continue
		}
		expT, err := expType.ExprType()
		if err != nil {
			t.Errorf("fail to get cel type: %s", err)
		}
		actT, err := actType.ExprType()

      CompileTimeConstantOperand<TF::DepthwiseConv2dNativeBackpropFilterOp, 1>,
      // $input_sizes
      CompileTimeConstantOperand<TF::DepthwiseConv2dNativeBackpropInputOp, 0>,
      CompileTimeConstantOperand<TF::EmptyOp, 0>,  // $shape
      // $element_shape, $max_num_elements
      CompileTimeConstantOperand<TF::EmptyTensorListOp, 0, 1>,
      CompileTimeConstantOperand<TF::ExpandDimsOp, 1>,   // $dim

      OperationName(mlir::TF::BroadcastGradientArgsOp::getOperationName(),
                    context),
      OperationName(mlir::TF::ConcatOffsetOp::getOperationName(), context),
      OperationName(mlir::TF::EmptyOp::getOperationName(), context),
      OperationName(mlir::TF::ListDiffOp::getOperationName(), context),
      OperationName(mlir::TF::RankOp::getOperationName(), context),

					SecretRef: &corev1.SecretReference{
						Name:      "",
						Namespace: "cephfs"}}}}}
	VisitPVSecretNames(emptyPV, func(namespace, name string, kubeletVisible bool) bool {
		t.Fatalf("expected no empty names collected, got %q", name)
		return false
	})
}

// collectSecretPaths traverses the object, computing all the struct paths that lead to fields with "secret" in the name.