typeVersionCombinations: []envTypeAndVersion{
				{version.MajorMinor(1, 27), NewExpressions},
				// always enabled for StoredExpressions
			},
			invalidExpressions: []string{"fizz == 'buzz'"},
			activation:         map[string]any{"fizz": "buzz"},
			opts: []VersionedOptions{
				{IntroducedVersion: version.MajorMinor(1, 28), EnvOptions: []cel.EnvOption{cel.Variable("fizz", cel.StringType)}},
			},
		},
		{

			values:    []string{"/foo/{buzz}/bar/{**}"},
			wantError: true,
		},
		{
			name:      "unsupported path template - matchAnyTemplate with named var: {buzz=*}",
			values:    []string{"/foo/{buzz=*}/bar/{**}"},
			wantError: true,
		},
		{
			name:      "unsupported path template - matchAnyTemplate with named var: {buzz=**}",
			values:    []string{"/{*}/foo/{buzz=**}/bar"},

                    "implementation = ${externalDependency('foo', 'bar', '1.0')}, ${externalDependency('baz', 'buzz', '2.0')}",
                    "runtimeOnly = ${externalDependency('foo', 'bar', '1.0')}, ${externalDependency('baz', 'buzz', '2.0')}",
                    "compileOnly = ${externalDependency('foo', 'bar', '1.0')}, ${externalDependency('baz', 'buzz', '2.0')}"
                ]

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  annotations:
    gateway.istio.io/controller-version: "5"
---
apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    fizz: buzz
  labels:
    foo: bar
    gateway.istio.io/managed: istio.io-gateway-controller
    gateway.networking.k8s.io/gateway-name: default
    istio.io/dataplane-mode: none
    istio.io/gateway-name: default
  name: default-istio

            "com.foo.bar.FooBarBazTest",
            "com/foo/bar/FooBarBazTest\$SomeUtility.java",
            "com.foo.bar.FooBarBazTest\$SomeUtility",
            "com.fizz.buzz.TestUtil",
            "com.fizz.buzz.SomeUtil",
            "com.google.common.collect.ImmutableSet",
            "com.google.common.collect.ImmutableSet",
            "com.google.common.collect.ImmutableSet",

	// Payload {
	//  "aud": [
	//	  "foo",
	// 	  "buzz"
	//  ],
	//  "exp": 4732994801,
	//  "iat": 1579394801,
	//  "iss": "******@****.***",
	//  "sub": "sub-1"
	// }
	// Generated by: security/tools/jwt/samples/gen-jwt.py tests/common/jwt/key.pem -jwks=tests/common/jwt/jwks.json
	// --expire=3153600000 --iss=******@****.*** --sub=sub-1 --aud=foo,buzz
	// nolint: lll

        newIsolatables[1].isolate() == EnumType.BAR
    }

    def "can serialize/deserialize isolated Map"() {
        Map<String, String> map = [
                "foo": "bar",
                "baz": "buzz"
        ]

        when:
        serialize(isolatableFactory.isolate(map))

        and:
        Isolatable<?>[] newIsolatables = deserialize()

        then:

                message.set(zipped)
            }
        """

        when:
        configurationCacheRun("ok", "-DmessagePrefix=fizz", "-DmessageSuffix=buzz")

        then:
        output.count("fizz buzz!") == 1
        configurationCache.assertStateStored()

        when:
        configurationCacheRun("ok", "-DmessagePrefix=foo", "-DmessageSuffix=bar")

        then:

							allow: true,
						},
						// Test matches for `/foo/{*}/bar/{**}`
						{
							path:  "/foo/buzz/bar/bat.txt",
							allow: true,
						},
						{
							path:  "/foo/buzz/bar/bat.temp.txt",
							allow: true,
						},
						{
							path:  "/foo/buzz/bar/bat/fuzz.txt",
							allow: true,
						},
						{
							path:  "/foo/bar/bat.txt",
							allow: false,

						Labels:      map[k8s.AnnotationKey]k8s.AnnotationValue{"foo": "bar", "gateway.networking.k8s.io/ignore": "true"},
						Annotations: map[k8s.AnnotationKey]k8s.AnnotationValue{"fizz": "buzz", "gateway.networking.k8s.io/ignore": "true"},
					},
				},
			},
			objects: defaultObjects,
		},
		{
			name: "kube-gateway-ambient-redirect",
			gw: k8sbeta.Gateway{