Never := func(echo.Instance, echo.CallOptions) bool {
				return false
			}
			SameNetwork := func(from echo.Instance, to echo.Target) echo.Instances {
				return match.Network(from.Config().Cluster.NetworkName()).GetMatches(to.Instances())
			}
			SupportsHBone := func(from echo.Instance, opts echo.CallOptions) bool {
				if !from.Config().IsUncaptured() && !opts.To.Config().IsUncaptured() {
					return true
				}

    * In order to remain backwards compatible, the new controller only manages attach/detach of volumes that are scheduled to nodes that opt-in to controller...

	waitForDetachCallCount(t, 0 /* expectedDetachCallCount */, fakePlugin)

	// Force detach metric due to out-of-service taint
	// We shouldn't see any additional force detaches, so only consider the initial count
	testForceDetachMetric(t, int(initialForceDetachCount), metrics.ForceDetachReasonOutOfService)

	// Act
	// Taint the node
	node3 := node2.DeepCopy()

			if waypointPolicy == nil {
				return nil
			}
			match := waypointPolicy.Authorization.GetGroups()[0].GetRules()[0].GetMatches()[0]
			return slices.Map(match.Principals, func(sm *security.StringMatch) string {
				return sm.GetExact()
			})
		}, []string{
			"cluster.local/ns/ns1/sa/namespace-wide",

        try ( SmbTreeHandleImpl th = ensureTreeConnected() ) {
            SecurityDescriptor desc = querySecurity(th, SecurityInfo.DACL_SECURITY_INFO);
            ACE[] aces = desc.getAces();
            if ( aces != null ) {
                processAces(aces, resolveSids);
            }

            return aces;
        }
    }


    @Override