}

func rsJoin(requestResource, requestSubresource string) string {
	seekString := requestResource
	if requestSubresource != "" {
		seekString = requestResource + "/" + requestSubresource
	}
	return seekString
}

func matchPolicyRuleResource(policyRuleRequestResources []string, requestResource, requestSubresource string) bool {

	// with `resource: {group:"apps", version:"v1", resource:"deployments"}` (matching the resource the webhook registered for),
	// and `requestResource: {group:"apps", version:"v1beta1", resource:"deployments"}` (indicating the resource of the original API request).
	//
	RequestResource *metav1.GroupVersionResource `json:"requestResource,omitempty"`

	out.Resource = in.Resource
	if in.RequestKind != nil {
		in, out := &in.RequestKind, &out.RequestKind
		*out = new(v1.GroupVersionKind)
		**out = **in
	}
	if in.RequestResource != nil {
		in, out := &in.RequestResource, &out.RequestResource
		*out = new(v1.GroupVersionResource)
		**out = **in
	}
	in.UserInfo.DeepCopyInto(&out.UserInfo)
	if in.Object != nil {
		out.Object = in.Object.DeepCopyObject()
	}

	out.Resource = in.Resource
	if in.RequestKind != nil {
		in, out := &in.RequestKind, &out.RequestKind
		*out = new(v1.GroupVersionKind)
		**out = **in
	}
	if in.RequestResource != nil {
		in, out := &in.RequestResource, &out.RequestResource
		*out = new(v1.GroupVersionResource)
		**out = **in
	}
	in.UserInfo.DeepCopyInto(&out.UserInfo)
	in.Object.DeepCopyInto(&out.Object)
	in.OldObject.DeepCopyInto(&out.OldObject)

	if !ok {
		return false
	}

	if !requestInfo.IsResourceRequest {
		return false
	}

	requestResource := schema.GroupResource{Group: requestInfo.APIGroup, Resource: requestInfo.Resource}
	if !roleResources[requestResource] {
		return false
	}

	attrs := authorizer.AttributesRecord{
		User:            user,
		Verb:            "escalate",

	// and `requestResource: {group:"apps", version:"v1beta1", resource:"deployments"}` (indicating the resource of the original API request).
	//
	// See documentation for the "matchPolicy" field in the webhook configuration type.
	// +optional
	RequestResource *metav1.GroupVersionResource `json:"requestResource,omitempty" protobuf:"bytes,14,opt,name=requestResource"`

	// and `requestResource: {group:"apps", version:"v1beta1", resource:"deployments"}` (indicating the resource of the original API request).
	//
	// See documentation for the "matchPolicy" field in the webhook configuration type.
	// +optional
	RequestResource *metav1.GroupVersionResource `json:"requestResource,omitempty" protobuf:"bytes,14,opt,name=requestResource"`

	out.Resource = in.Resource
	if in.RequestKind != nil {
		in, out := &in.RequestKind, &out.RequestKind
		*out = new(metav1.GroupVersionKind)
		**out = **in
	}
	if in.RequestResource != nil {
		in, out := &in.RequestResource, &out.RequestResource
		*out = new(metav1.GroupVersionResource)
		**out = **in
	}
	in.UserInfo.DeepCopyInto(&out.UserInfo)
	in.Object.DeepCopyInto(&out.Object)
	in.OldObject.DeepCopyInto(&out.OldObject)

    apiVersion: example.com/v1
    kind: CustomType
    spec:
      replicas: 1
    status:
      available: 1
  requestKind:
    group: groupValue
    kind: kindValue
    version: versionValue
  requestResource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  requestSubResource: requestSubResourceValue
  resource:
    group: groupValue
    resource: resourceValue

	out.Kind = in.Kind
	out.Resource = in.Resource
	out.SubResource = in.SubResource
	out.RequestKind = (*metav1.GroupVersionKind)(unsafe.Pointer(in.RequestKind))
	out.RequestResource = (*metav1.GroupVersionResource)(unsafe.Pointer(in.RequestResource))
	out.RequestSubResource = in.RequestSubResource
	out.Name = in.Name
	out.Namespace = in.Namespace
	out.Operation = admission.Operation(in.Operation)