// this would return true only if there was a policy allowing `ingress-ns` to access Secrets in the `ns-name` namespace.
	SecretAllowed(resourceName string, namespace string) bool
}

// OutboundListenerClass is a helper to turn a NodeType for outbound to a ListenerClass.
func OutboundListenerClass(t NodeType) istionetworking.ListenerClass {
	if t == Router {
		return istionetworking.ListenerClassGateway
	}

			return nil, nil
		})

	validateFuncs = make(map[string]ValidateFunc)
)

type (
	Warning    = agent.Warning
	Validation = agent.Validation
)

// WrapWarning turns an error into a Validation as a warning
func WrapWarning(e error) Validation {
	return Validation{Warning: e}
}

func AppendValidation(v Validation, vs ...error) Validation {
	return agent.AppendValidation(v, vs...)

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request

              - pilot-agent
              - wait
      {{- else if $nativeSidecar }}
        {{- /* preStop is called when the pod starts shutdown. Initialize drain. We will get SIGTERM once applications are torn down. */}}
        lifecycle:
          preStop:
            exec:
              command:
              - pilot-agent
              - request