{
	REG_UNKNOWN,	"UNKNOWN",
	REG_NOMATCH,	"NOMATCH",
	REG_BADPAT,	"BADPAT",
	REG_ECOLLATE,	"ECOLLATE",
	REG_ECTYPE,	"ECTYPE",
	REG_EESCAPE,	"EESCAPE",
	REG_ESUBREG,	"ESUBREG",
	REG_EBRACK,	"EBRACK",
	REG_EPAREN,	"EPAREN",
	REG_EBRACE,	"EBRACE",
	REG_BADBR,	"BADBR",
	REG_ERANGE,	"ERANGE",
	REG_ESPACE,	"ESPACE",
	REG_BADRPT,	"BADRPT",
	REG_ENEWLINE,	"ENEWLINE",

	writeTestFile(t, fmt.Sprintf("%s/badpod.json", tmpDir), aPodBadAnnotations)

	tests := []struct {
		name          string
		file          string
		expectedError string
	}{
		{
			name:          "pod",
			file:          "pod.json",
			expectedError: "",
		},
		{
			name:          "badpod",
			file:          "badpod.json",
			expectedError: "ObjectMeta.",
		},
	}

	// match (e.g. /foo/bar matches /foo/bar/baz, but does not match
	// /foo/barbaz). If multiple matching paths exist in an Ingress spec, the
	// longest matching path is given priority.
	// Examples:
	// - /foo/bar does not match requests to /foo/barbaz
	// - /foo/bar matches request to /foo/bar and /foo/bar/baz
	// - /foo and /foo/ both match requests to /foo and /foo/. If both paths are

			} else if sawInsecure {
				t.Errorf("%#04x: secure suite after insecure one(s)", id)
			}

			if http2isBadCipher(id) {
				sawBad = true
			} else if sawBad {
				t.Errorf("%#04x: non-bad suite after bad HTTP/2 one(s)", id)
			}
		}

		// Check that the list is sorted according to the documented criteria.
		isBetter := func(a, b uint16) int {
			aSuite, bSuite := cipherSuiteByID(a), cipherSuiteByID(b)

AAEI,GAAGH,GAAMuE,YAAczE,EACzBC,EAAEI,GAAGH,GAAMwE,WAAc,WAEvB,OADAzE,EAAEI,GAAGH,GAAQE,EACNJ,EAAe8D,kBAGjB9D,EAxRe,CAyRrB2E,QCzRGC,EAAU,SAAC3E,GAMf,IAAMC,EAAqB,SAGrBE,EAAqBH,EAAEI,GAAGH,GAM1BO,EACa,eADbA,EAEa,gBAFbA,EAGa,yBAHbA,EAIa,mBAJbA,EASqB,2BATrBA,EAUiB,kCAVjBA,EAYa,eAZbA,EAaa,2BAbbA,EAca,aAdbA,EAea,gBAGbC,EAIa,kBAJbA,EAKa,eALbA,EAQa,aARbA,EASa,gBATbA,EAUwB,6BAVxBA,EAWkB,uBAGlBC,EAAU,CACdE,eAAiB,iBACjBC,kBAAmB,KAQf8D,EAzDe,WA0DnB,SAAAA,EAAY7D,EAASC,GACnBC,KAAKE,QAAWH,EAChBC,KAAKC,SAAWH,EAE...

	if err := store.GuaranteedUpdate(ctx, key, updatedPod, false, nil,
		storage.SimpleUpdate(func(obj runtime.Object) (runtime.Object, error) {
			pod := obj.(*example.Pod)
			pod.ObjectMeta.Labels = map[string]string{"foo": "barbar"}
			return pod, nil
		}), nil); err != nil {
		t.Errorf("Unexpected failure during updated: %v", err)
	}

	calls := 0
	validateFresh := func(_ context.Context, obj runtime.Object) error {
		calls++