// patternAllowlist takes a list of sysctls or sysctl patterns (ending in *) and
// checks validity via a sysctl and prefix map, rejecting those which are not known
// to be namespaced.
type patternAllowlist struct {
	sysctls  map[string]utilsysctl.Namespace
	prefixes map[string]utilsysctl.Namespace
}

var _ lifecycle.PodAdmitHandler = &patternAllowlist{}

// NewAllowlist creates a new Allowlist from a list of sysctls and sysctl pattern (ending in *).

{
  "apiVersion": "v1",
  "groupVersion": "authentication.k8s.io/v1beta1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "SelfSubjectReview",
      "name": "selfsubjectreviews",
      "namespaced": false,
      "singularName": "selfsubjectreview",
      "verbs": [
        "create"
      ]
    }
  ]

{
  "apiVersion": "v1",
  "groupVersion": "scheduling.k8s.io/v1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "PriorityClass",
      "name": "priorityclasses",
      "namespaced": false,
      "shortNames": [
        "pc"
      ],
      "singularName": "priorityclass",
      "storageVersionHash": "1QwjyaZjj3Y=",
      "verbs": [
        "create",
        "delete",
        "deletecollection",
        "get",

{
  "apiVersion": "v1",
  "groupVersion": "coordination.k8s.io/v1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "Lease",
      "name": "leases",
      "namespaced": true,
      "singularName": "lease",
      "storageVersionHash": "gqkMMb/YqFM=",
      "verbs": [
        "create",
        "delete",
        "deletecollection",
        "get",
        "list",
        "patch",
        "update",

      storage: true
      schema:
        openAPIV3Schema:
          type: object
          x-kubernetes-preserve-unknown-fields: true
  names:
    kind: ScalingPolicy
    plural: scalingpolicies

		input  APIResource
		result string
	}{
		{APIResource{}, `{"name":"","singularName":"","namespaced":false,"kind":"","verbs":null}`},
		{APIResource{Verbs: Verbs([]string{})}, `{"name":"","singularName":"","namespaced":false,"kind":"","verbs":[]}`},
		{APIResource{Verbs: Verbs([]string{"delete"})}, `{"name":"","singularName":"","namespaced":false,"kind":"","verbs":["delete"]}`},
	}

	for i, c := range cases {

            String namespace = dis.readUTF();
            String name = dis.readUTF();
            return new NamespaceId(namespace, name);
        } catch (Exception e) {
            throw new RuntimeException("Failed decoding namespace ID");
        }
    }

    public NamespaceId(String namespace, String name) {
        this.namespace = namespace;
        this.name = name;
    }

{
  "apiVersion": "v1",
  "groupVersion": "authentication.k8s.io/v1alpha1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "SelfSubjectReview",
      "name": "selfsubjectreviews",
      "namespaced": false,
      "singularName": "selfsubjectreview",
      "verbs": [
        "create"
      ]
    }
  ]

{
  "apiVersion": "v1",
  "groupVersion": "discovery.k8s.io/v1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "EndpointSlice",
      "name": "endpointslices",
      "namespaced": true,
      "singularName": "endpointslice",
      "storageVersionHash": "qgS0xkrxYAI=",
      "verbs": [
        "create",
        "delete",
        "deletecollection",
        "get",
        "list",
        "patch",

{
  "apiVersion": "v1",
  "groupVersion": "node.k8s.io/v1",
  "kind": "APIResourceList",
  "resources": [
    {
      "kind": "RuntimeClass",
      "name": "runtimeclasses",
      "namespaced": false,
      "singularName": "runtimeclass",
      "storageVersionHash": "WQTu1GL3T2Q=",
      "verbs": [
        "create",
        "delete",
        "deletecollection",
        "get",
        "list",
        "patch",
        "update",