# This script is provided to help converting RbacConfig to ClusterRbacConfig automatically. The RbacConfig
# will be deleted after the corresponding ClusterRbacConfig is successfully applied.
# The RbacConfig is deprecated by ClusterRbacConfig due to an implementation bug that could cause the
# RbacConfig to be namespace scoped in some cases. The ClusterRbacConfig has exactly same specification
# as the RbacConfig, but with correctly implemented cluster scope.

	{
		Group: "rbac.istio.io",
		Names: k8sext.CustomResourceDefinitionNames{Kind: "ClusterRbacConfig"},
	},
	{
		Group: "rbac.istio.io",
		Names: k8sext.CustomResourceDefinitionNames{Kind: "RbacConfig"},
	},
	{
		Group: "rbac.istio.io",
		Names: k8sext.CustomResourceDefinitionNames{Kind: "ServiceRole"},
	},
	{
		Group: "rbac.istio.io",
		Names: k8sext.CustomResourceDefinitionNames{Kind: "ServiceRoleBinding"},

conformance_test,TestConformance/policy/instance/basic
conformance_test,TestConformance/policy/rules/basic
conformance_test,TestConformance/rbac/clusterRbacConfig/basic
conformance_test,TestConformance/rbac/rbacConfig/basic
conformance_test,TestConformance/rbac/serviceRole/basic
conformance_test,TestConformance/rbac/serviceRoleBinding/basic
conformance_test,TestConformance/security/authorizationPolicy/basic