apiVersion: v1
kind: APIGroup
name: nameValue
preferredVersion:
  groupVersion: groupVersionValue
  version: versionValue
serverAddressByClientCIDRs:
- clientCIDR: clientCIDRValue
  serverAddress: serverAddressValue
versions:
- groupVersion: groupVersionValue

{
  "kind": "APIGroup",
  "apiVersion": "v1",
  "name": "nameValue",
  "versions": [
    {
      "groupVersion": "groupVersionValue",
      "version": "versionValue"
    }
  ],
  "preferredVersion": {
    "groupVersion": "groupVersionValue",
    "version": "versionValue"
  },
  "serverAddressByClientCIDRs": [
    {
      "clientCIDR": "clientCIDRValue",
      "serverAddress": "serverAddressValue"
    }
  ]

SataQiu <******@****.***> 1713430345 +0800

				APIGroup: "foo.bar",
				Resource: "events",
			},
			counts: map[string]int64{
				"events.foo.bar": 399,
			},
			maxSeats:             10,
			initialSeatsExpected: 8,
		},
		{
			name:       "request verb is list, no query parameters, count not known",
			requestURI: "http://server/apis/foo.bar/v1/events",
			requestInfo: &apirequest.RequestInfo{
				Verb:     "list",
				APIGroup: "foo.bar",

			deleteOptions: &metav1.DeleteOptions{},
			requestInfo:   &genericapirequest.RequestInfo{APIGroup: "batch", APIVersion: "v1"},
		},
		{
			description:   "deletion: no policy, v2, no warning",
			expectWarning: false,
			deleteOptions: &metav1.DeleteOptions{},
			requestInfo:   &genericapirequest.RequestInfo{APIGroup: "batch", APIVersion: "v2"},
		},
		{

	Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
	// APIGroup holds the API group of the referenced subject.
	// Defaults to "" for ServiceAccount subjects.
	// Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
	// +optional
	APIGroup string `json:"apiGroup,omitempty" protobuf:"bytes,2,opt,name=apiGroup"`
	// Name of the object being referenced.

	resource, apiGroup, apiVersion := "*", "*", "*"

	if policy, err := v.policyGetter.GetValidatingAdmissionPolicy(ctx, binding.Spec.PolicyName); err == nil && policy.Spec.ParamKind != nil {
		paramKind := policy.Spec.ParamKind
		if gv, err := schema.ParseGroupVersion(paramKind.APIVersion); err == nil {
			// we only need to authorize the parsed group/version
			apiGroup = gv.Group
			apiVersion = gv.Version

        "fieldsV1": {},
        "subresource": "subresourceValue"
      }
    ]
  },
  "subjects": [
    {
      "kind": "kindValue",
      "apiGroup": "apiGroupValue",
      "name": "nameValue",
      "namespace": "namespaceValue"
    }
  ],
  "roleRef": {
    "apiGroup": "apiGroupValue",
    "kind": "kindValue",
    "name": "nameValue"
  }

    istio.io/rev: {{ .Values.revision | default "default" }}
    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "Cni"
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: {{ template "name" . }}
subjects:
- kind: ServiceAccount
  name: {{ template "name" . }}
  namespace: {{ .Release.Namespace }}
---

	podKind      = "Pod"
)

func makeDataSource(apiGroup, kind, name string) *core.TypedLocalObjectReference {
	return &core.TypedLocalObjectReference{
		APIGroup: &apiGroup,
		Kind:     kind,
		Name:     name,
	}
}

func makeDataSourceRef(apiGroup, kind, name string, namespace *string) *core.TypedObjectReference {
	return &core.TypedObjectReference{
		APIGroup:  &apiGroup,
		Kind:      kind,
		Name:      name,