- mountPath: /etc/istio/proxy
              name: istio-envoy
            {{- if eq .Values.global.jwtPolicy "third-party-jwt" }}
            - mountPath: /var/run/secrets/tokens
              name: istio-token
            {{- end }}
            {{- if .Values.global.mountMtlsCerts }}
            # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.

      "funding": {
        "type": "opencollective",
        "url": "https://opencollective.com/js-sdsl"
      }
    },
    "node_modules/js-tokens": {
      "version": "4.0.0",
      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
      "dev": true
    },

  func.return
  // expected-remark@above {{ID: 10}}
  // expected-remark@above {{Sinks: {9}}}
}

// -----

// Tests that we create dependencies between `CollectiveReduceV2` ops if no
// ordering tokens are present (TF_CollectiveReduceOrderingEffect).
func.func @collective_reduce_ordering_effect(
  // expected-remark@above {{ID: 7}}
  %input: tensor<f32>,
  %group_key: tensor<i32>,
  %group_size: tensor<i32>,

</p>

<h3 id="Tokens">Tokens</h3>

<p>
Tokens form the vocabulary of the Go language.
There are four classes: <i>identifiers</i>, <i>keywords</i>, <i>operators
and punctuation</i>, and <i>literals</i>.  <i>White space</i>, formed from
spaces (U+0020), horizontal tabs (U+0009),
carriage returns (U+000D), and newlines (U+000A),
is ignored except as it separates tokens

//    instance_key to distinguish collective groups. In this case, ordering
//    tokens are irrelevant. Each collective group should have a unique
//    instance_key at runtime.
// 2) If at least one ordering token is present, then we purely rely on ordering
//    tokens for side effect modeling and ignore the op-based effect
//    `TF_CollectiveReduceOrderingEffect` for which this function is relevant

	return ret
}

// newClaimServer returns a new test HTTPS server, which is rigged to return
// OIDC responses to requests that resolve distributed claims. signer is the
// signer used for the served JWT tokens.  claimToResponseMap is a map of
// responses that the server will return for each claim it is given.

  const auto iter = host_compute_core.find(original_oc_name);
  if (iter != host_compute_core.end()) {
    int core = iter->second;
    host_compute_builder.Attr("tpu_core", core);
  }

  // Set input tokens and other outside compilation clusters that current
  // cluster depends in `kXlaTokenArgNodeName`. This is needed because when
  // outside compilation subgraphs are encapsulated and moved to host graph,

$value }}" {{- end }} {{- end }} {{- with .Values.env }} {{- range $key, $val := . }} - name: {{ $key }} value: "{{ $val }}" {{- end }} {{- end }} volumeMounts: - mountPath: /var/run/secrets/istio name: istiod-ca-cert - mountPath: /var/run/secrets/tokens name: istio-token {{- with .Values.volumeMounts }} {{- toYaml . | nindent 8 }} {{- end }} priorityClassName: system-node-critical terminationGracePeri: {{ .Values.terminationGracePeri }} volumes: - name: istio-token projected: sources: - serviceAccountToken:...

          <type>String</type>
        </field>
        <field>
          <name>filtering</name>
          <version>3.0.0+</version>
          <description>
            Whether resources are filtered to replace tokens with parameterised values or not.
            The values are taken from the {@code properties} element and from the
            properties in the files listed in the {@code filters} element. Note: While the type

    // these info.
    VLOG(1) << "Failed during XlaCallModule shape refinement: " << status;
  }
  mlir::ResultRange op_results = op.getResults();
  // The main_outputs may include tokens that are not among the op_results;
  mlir::TypeRange main_output_types = loader->OutputTypes();
  int nr_main_token_outputs =
      llvm::count_if(main_output_types, tensorflow::IsTokenType);