m.compileMatcher.Do(func() {
		expressions := make([]cel.ExpressionAccessor, len(m.MutatingWebhook.MatchConditions))
		for i, matchCondition := range m.MutatingWebhook.MatchConditions {
			expressions[i] = &matchconditions.MatchCondition{
				Name:       matchCondition.Name,
				Expression: matchCondition.Expression,
			}
		}
		strictCost := false

	if len(matchConditions) > 0 {
		matchExpressionAccessors := make([]cel.ExpressionAccessor, len(matchConditions))
		for i := range matchConditions {
			matchExpressionAccessors[i] = (*matchconditions.MatchCondition)(&matchConditions[i])
		}

			ClientConfig: validClientConfig,
			SideEffects:  &noSideEffect,
			MatchConditions: []admissionregistration.MatchCondition{{
				Expression: "true",
			}, {
				Expression: "true",
			}},
		}, {
			Name:         "webhook.k8s.io",
			ClientConfig: validClientConfig,
			SideEffects:  &noSideEffect,
			MatchConditions: []admissionregistration.MatchCondition{{
				Name:       "",
				Expression: "true",
			}},
		},

			if conditionNames.Has(matchCondition.Name) {
				allErrors = append(allErrors, field.Duplicate(fldPath.Index(i).Child("name"), matchCondition.Name))
			} else {
				conditionNames.Insert(matchCondition.Name)
			}
		}
	}
	return allErrors
}

func validateMatchCondition(v *admissionregistration.MatchCondition, opts validationOptions, fldPath *field.Path) field.ErrorList {
	var allErrors field.ErrorList

		allErrs = append(allErrs, field.Invalid(fldPath.Child("matchConditions"), "", "matchConditions are not supported when StructuredAuthorizationConfiguration feature gate is disabled"))
	}
	if len(matchConditions) > 64 {
		allErrs = append(allErrs, field.TooMany(fldPath.Child("matchConditions"), len(matchConditions), 64))
		return nil, allErrs
	}

  clientConfig:
    caBundle: Ag==
    service:
      name: nameValue
      namespace: namespaceValue
      path: pathValue
      port: 4
    url: urlValue
  failurePolicy: failurePolicyValue
  matchConditions:
  - expression: expressionValue
    name: nameValue
  matchPolicy: matchPolicyValue
  name: nameValue
  namespaceSelector:
    matchExpressions:
    - key: keyValue
      operator: operatorValue

          }
        ]
      },
      "sideEffects": "sideEffectsValue",
      "timeoutSeconds": 7,
      "admissionReviewVersions": [
        "admissionReviewVersionsValue"
      ],
      "matchConditions": [
        {
          "name": "nameValue",
          "expression": "expressionValue"
        }
      ]
    }
  ]

  clientConfig:
    caBundle: Ag==
    service:
      name: nameValue
      namespace: namespaceValue
      path: pathValue
      port: 4
    url: urlValue
  failurePolicy: failurePolicyValue
  matchConditions:
  - expression: expressionValue
    name: nameValue
  matchPolicy: matchPolicyValue
  name: nameValue
  namespaceSelector:
    matchExpressions:
    - key: keyValue
      operator: operatorValue

      "timeoutSeconds": 7,
      "admissionReviewVersions": [
        "admissionReviewVersionsValue"
      ],
      "reinvocationPolicy": "reinvocationPolicyValue",
      "matchConditions": [
        {
          "name": "nameValue",
          "expression": "expressionValue"
        }
      ]
    }
  ]

	//
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	// +optional
	MatchConditions []MatchCondition `json:"matchConditions,omitempty" patchStrategy:"merge" patchMergeKey:"name" protobuf:"bytes,6,rep,name=matchConditions"`

	// Variables contain definitions of variables that can be used in composition of other expressions.
	// Each variable is defined as a named CEL expression.