expect: authorizer.DecisionAllow,
		},
		{
			name:   "allowed secret via pod",
			attrs:  authorizer.AttributesRecord{User: node0, ResourceRequest: true, Verb: "get", Resource: "secrets", Name: "secret0-pod0-node0", Namespace: "ns0"},
			expect: authorizer.DecisionAllow,
		},
		{
			name:   "list allowed secret via pod",

		{
			description: "success, single stack no node allocation",
			fakeNodeHandler: &testutil.FakeNodeHandler{
				Existing: []*v1.Node{
					{
						ObjectMeta: metav1.ObjectMeta{
							Name: "node0",
						},
					},
				},
				Clientset: fake.NewSimpleClientset(),
			},
			allocatorParams: CIDRAllocatorParams{
				ClusterCIDRs: func() []*net.IPNet {

								{Key: "key2", Value: "value2", Effect: "NoExecute"},
							},
						},
					},
				},
				Clientset: fake.NewSimpleClientset(&v1.PodList{Items: []v1.Pod{*testutil.NewPod("pod0", "node0")}}),
			},
			nodeName: "node1",
			taintsToRemove: []*v1.Taint{
				{Key: "key2", Value: "value2", Effect: "NoExecute"},
			},
			expectedTaints: []v1.Taint{

		CPU(s):              80
		On-line CPU(s) list: 0-79
		Thread(s) per core:  2
		Core(s) per socket:  20
		Socket(s):           2
		NUMA node(s):        4
		NUMA node0 CPU(s):   0-9,40-49
		NUMA node1 CPU(s):   10-19,50-59
		NUMA node2 CPU(s):   20-29,60-69
		NUMA node3 CPU(s):   30-39,70-79
	*/
	topoDualSocketMultiNumaPerSocketHT = &topology.CPUTopology{
		NumCPUs:      80,