action: DENY
groups:
- rules:
  - matches:
    - destinationPorts:
      - 80
  - matches:
    - namespaces:
      - exact: from-mix-ns
      principals:
      - exact: from-mix-principal
- rules:
  - matches:
    - destinationPorts:
      - 80
  - matches:
    - namespaces:
      - exact: to-mix-ns
      principals:
      - exact: to-mix-principal
- rules:
  - matches:
    - destinationPorts:
      - 80

lei-tang <******@****.***> 1537395504 -0700

        d.module == 'aModule'
        !d.group
    }

    def "with group and module"() {
        when:
        ExcludeRule d = parser.parseNotation([group: 'aGroup', module: 'aModule']);
        then:
        d != null;
        d instanceof DefaultExcludeRule
        d.group == 'aGroup'
        d.module == 'aModule'
    }

    def "with no group and no module InvalidUserDataException is thrown"() {

Douglas Reid <******@****.***> 1633375461 -0700

Faseela K <******@****.***> 1651883509 +0200

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: groups-deny
spec:
  action: DENY
  rules:
  # Has mix of L4 and L7 in from
  - from:
    - source:
        principals: ["from-mix-principal"]
        requestPrincipals: ["from-mix-requestPrincipals"]
        namespaces: ["from-mix-ns"]
    to:
    - operation:
        ports: ["80"]
  # Has mix of L4 and L7 in to
  - from:
    - source:

Ben Leggett <******@****.***> 1710179183 -0400

        gradleProject.tasks.findAll { it.name.startsWith('test') }.each {
            assert it.group == "task group ${it.name-'test'}"
        }
    }

    def "provide getGroup on Task using BuildInvocations"() {
        file("build.gradle") << '''
task test1(group:'task group 1')
task test2(group:'task group 2')
'''

        when:
        def buildInvocations = withConnection { ProjectConnection connection ->

        model.build()

        then:
        model.groups == ([group] + groups - null) as Set

        where:
        group    | groups
        'group1' | []
        'group2' | []
        null     | ['group1']
        null     | ['group1', 'group2']
        'group1' | ['group2']
    }

    def "handles group which is not present in each project"() {

	libcontainercgroups "github.com/opencontainers/runc/libcontainer/cgroups"
	libcontainerutils "github.com/opencontainers/runc/libcontainer/utils"
)

const (
	// CgroupRoot is the base path where cgroups are mounted
	CgroupRoot = "/sys/fs/cgroup"
)

// GetPids gets pids of the desired cgroup
// Forked from opencontainers/runc/libcontainer/cgroup/fs.Manager.GetPids()
func GetPids(cgroupPath string) ([]int, error) {
	dir := ""