registerMetrics.Do(func() {
		legacyregistry.MustRegister(authenticationConfigAutomaticReloadsTotal)
		legacyregistry.MustRegister(authenticationConfigAutomaticReloadLastTimestampSeconds)
	})
}

func ResetMetricsForTest() {
	authenticationConfigAutomaticReloadsTotal.Reset()
	authenticationConfigAutomaticReloadLastTimestampSeconds.Reset()
}

func RecordAuthenticationConfigAutomaticReloadFailure(apiServerID string) {

	)
)

var registerMetrics sync.Once

func RegisterMetrics() {
	registerMetrics.Do(func() {
		legacyregistry.MustRegister(authorizationDecisionsTotal)
	})
}

func ResetMetricsForTest() {
	authorizationDecisionsTotal.Reset()
}

func RecordAuthorizationDecision(authorizerType, authorizerName, decision string) {

				return sha256.New()
			},
		}
		legacyregistry.MustRegister(authorizationConfigAutomaticReloadsTotal)
		legacyregistry.MustRegister(authorizationConfigAutomaticReloadLastTimestampSeconds)
	})
}

func ResetMetricsForTest() {
	authorizationConfigAutomaticReloadsTotal.Reset()
	authorizationConfigAutomaticReloadLastTimestampSeconds.Reset()
}

func RecordAuthorizationConfigAutomaticReloadFailure(apiServerID string) {

			apiserver_authorization_match_condition_exclusions_total{name="wh1.example.com",type="Webhook"} 1
			`,
		},
	}

	for _, tt := range testCases {
		t.Run(tt.desc, func(t *testing.T) {
			ResetMetricsForTest()
			m := NewMatcherMetrics()
			m.RecordAuthorizationMatchConditionEvaluationFailure(context.Background(), tt.authztype, tt.name)
			m.RecordAuthorizationMatchConditionExclusion(context.Background(), tt.authztype, tt.name)

		legacyregistry.MustRegister(authorizationMatchConditionExclusionsTotal)
		legacyregistry.MustRegister(authorizationMatchConditionEvaluationSeconds)
	})
}

func ResetMetricsForTest() {
	authorizationMatchConditionEvaluationErrorsTotal.Reset()
	authorizationMatchConditionExclusionsTotal.Reset()
	authorizationMatchConditionEvaluationSeconds.Reset()
}

	registerWebhookMetrics.Do(func() {
		legacyregistry.MustRegister(webhookEvaluations)
		legacyregistry.MustRegister(webhookDuration)
		legacyregistry.MustRegister(webhookFailOpen)
	})
}

func ResetMetricsForTest() {
	webhookEvaluations.Reset()
	webhookDuration.Reset()
	webhookFailOpen.Reset()
}

const (
	namespace = "apiserver"
	subsystem = "authorization"
)

var (

					`, "wh1.example.com", "Webhook", "wh2.example.com", "Webhook"),
		},
	}

	for _, tt := range testCases {
		t.Run(tt.name, func(t *testing.T) {
			celmetrics.ResetMetricsForTest()
			defer celmetrics.ResetMetricsForTest()
			wh1, err := newV1Authorizer(s.URL, clientCert, clientKey, caCert, 0, celAuthorizerMetrics(), tt.expressions1, "wh1.example.com")
			if err != nil {
				t.Fatal(err)
			}