loc, func.getFunctionType().getResults(),
      tf_executor::ControlType::get(&getContext()), ArrayRef<Value>());
  // Create Fetch.
  ValueRange to_fetch = island.getResults();
  if (to_fetch.size() != 1) {
    // Drop control result for fetch.
    to_fetch = to_fetch.drop_back();
  }
  builder.create<tf_executor::FetchOp>(loc, to_fetch);
  // Build Island.
  island.getBody().push_back(new Block);

// kubernetesReleaseVersionDefault is helper function that can fetch
// available version information from release servers based on
// label names, like "stable" or "latest".
//
// If argument is already semantic version string, it
// will return same string.
//
// In case of labels, it tries to fetch from release
// servers and then return actual semantic version.
//

      // CHECK: tf_executor.yield %[[CALL_OUTPUT]]
      tf_executor.yield %3 : tensor<?xf32>
    }
    tf_executor.fetch %1#0 : tensor<?xf32>
  }
  func.return %0 : tensor<?xf32>
}

func.func @_func(%arg0: tensor<?xf32>) -> tensor<?xf32> {
  func.return %arg0 : tensor<?xf32>
}

// -----

# Text form of tensorflow.tf2xla.Config proto.
fetch {
  id { node_name: "result" }
}

variable {
  node_name: "x"
  type: DT_FLOAT
}

variable {
  node_name: "y"
  type: DT_FLOAT
  readonly: true

env sumdb=$GOSUMDB
env proxy=$GOPROXY
env GOPROXY GONOPROXY GOSUMDB GONOSUMDB

# basic fetch (through proxy) works
cp go.mod.orig go.mod
go get rsc.io/fortune@v1.0.0 # note: must use test proxy, does not exist in real world
rm $GOPATH/pkg/mod/cache/download/sumdb # rm sumdb cache but NOT package download cache
rm go.sum

# can fetch by explicit URL
cp go.mod.orig go.mod
env GOSUMDB=$sumdb' '$proxy/sumdb-direct

feed {
  id { node_name: "x_hold" }
  shape {
    dim { size: 2 }
    dim { size: 3 }
  }
}
feed {
  id { node_name: "y_hold" }
  shape {
    dim { size: 3 }
    dim { size: 2 }
  }
}
fetch {
  id { node_name: "x_y_prod" }

feed {
  id { node_name: "x" }
  shape {
    dim { size: 2 }
    dim { size: 2 }
  }
}
feed {
  id { node_name: "y" }
  shape {
    dim { size: 2 }
    dim { size: 2 }
  }
}
fetch {
  id { node_name: "result" }

apiVersion: release-notes/v2
kind: bug-fix
area: security
releaseNotes:
  - |
    **Fixed** an issue where gateways cannot fetch JWKS from `jwksUri` in RequestAuthentication 

    steps:
    - name: Checkout repository
      uses: actions/checkout@v2
      with:
        # We must fetch at least the immediate parents so that if this is
        # a pull request then we can checkout the head.
        fetch-depth: 2

    # If this run was triggered by a pull request event, then checkout
    # the head of the pull request instead of the merge commit.

// RUN: tf-opt -tf-executor-graph-pruning %s  | FileCheck %s --check-prefix=CONTROL

// CONTROL-LABEL: func @main
// CONTROL-NEXT:    return

// EXECUTOR-LABEL: func @main
// EXECUTOR-NEXT:    tf_executor.graph {
// EXECUTOR-NEXT:      tf_executor.fetch
// EXECUTOR-NEXT:    }
// EXECUTOR-NEXT:    return

func.func @main() {
  func.return