if a.Lifecycle.PreStop != nil {
				if a.Lifecycle.PreStop.HTTPGet != nil {
					SetDefaults_HTTPGetAction(a.Lifecycle.PreStop.HTTPGet)
				}
			}
		}
	}
	for i := range in.Spec.EphemeralContainers {
		a := &in.Spec.EphemeralContainers[i]
		SetDefaults_EphemeralContainer(a)
		for j := range a.EphemeralContainerCommon.Ports {
			b := &a.EphemeralContainerCommon.Ports[j]
			if b.Protocol == "" {
				b.Protocol = "TCP"

	if shouldIgnore(a) {
		return nil
	}

	pod := a.GetObject().(*api.Pod)

	if a.GetOperation() == admission.Update && a.GetSubresource() == "ephemeralcontainers" {
		return s.limitEphemeralContainerSecretReferences(pod, a)
	}

	if a.GetOperation() != admission.Create {
		// we only validate pod specs during create requests
		return nil
	}

// oldPod or newPod may be nil to signify creation or deletion.
func updateMetrics(oldPod, newPod *v1.Pod) {
	var numEC int
	if oldPod != nil {
		numEC -= len(oldPod.Spec.EphemeralContainers)
	}
	if newPod != nil {
		numEC += len(newPod.Spec.EphemeralContainers)
	}
	if numEC != 0 {
		metrics.ManagedEphemeralContainers.Add(float64(numEC))
	}
}

// updatePodsInternal replaces the given pods in the current state of the

								RunAsUser: ptr.To[int64](1000),
							},
						},
						{
							SecurityContext: &v1.SecurityContext{
								RunAsUser: ptr.To[int64](1000),
							},
						},
					},
					EphemeralContainers: []v1.EphemeralContainer{
						{
							EphemeralContainerCommon: v1.EphemeralContainerCommon{
								SecurityContext: &v1.SecurityContext{
									RunAsUser: ptr.To[int64](1001),
								},
							},

      "name": "pods/binding",
      "namespaced": true,
      "singularName": "",
      "verbs": [
        "create"
      ]
    },
    {
      "kind": "Pod",
      "name": "pods/ephemeralcontainers",
      "namespaced": true,
      "singularName": "",
      "verbs": [
        "get",
        "patch",
        "update"
      ]
    },
    {
      "group": "policy",

		storage[resource+"/binding"] = podStorage.Binding
		if podStorage.Eviction != nil {
			storage[resource+"/eviction"] = podStorage.Eviction
		}
		storage[resource+"/ephemeralcontainers"] = podStorage.EphemeralContainers
	}
	if resource := "bindings"; apiResourceConfigSource.ResourceEnabled(corev1.SchemeGroupVersion.WithResource(resource)) {
		storage[resource] = podStorage.LegacyBinding
	}

func dropNonEphemeralContainerUpdates(newPod, oldPod *api.Pod) *api.Pod {
	pod := oldPod.DeepCopy()
	pod.Name = newPod.Name
	pod.Namespace = newPod.Namespace
	pod.ResourceVersion = newPod.ResourceVersion
	pod.UID = newPod.UID
	pod.Spec.EphemeralContainers = newPod.Spec.EphemeralContainers
	return pod
}

		{Group: "", Version: "v1", Kind: "EndpointsList"}:                                                          {},
		{Group: "", Version: "v1", Kind: "EphemeralContainers"}:                                                    {},
		{Group: "", Version: "v1", Kind: "Namespace"}:                                                              {},

        options:
        - name: nameValue
          value: valueValue
        searches:
        - searchesValue
      dnsPolicy: dnsPolicyValue
      enableServiceLinks: true
      ephemeralContainers:
      - args:
        - argsValue
        command:
        - commandValue
        env:
        - name: nameValue
          value: valueValue
          valueFrom:
            configMapKeyRef:

      - nameserversValue
      options:
      - name: nameValue
        value: valueValue
      searches:
      - searchesValue
    dnsPolicy: dnsPolicyValue
    enableServiceLinks: true
    ephemeralContainers:
    - args:
      - argsValue
      command:
      - commandValue
      env:
      - name: nameValue
        value: valueValue
        valueFrom:
          configMapKeyRef: