spec:
              accessModes:
              - accessModesValue
              dataSource:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
              dataSourceRef:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
                namespace: namespaceValue

// to specify a cluster or namespace-scoped resource.
message IngressClassParametersReference {
  // apiGroup is the group for the resource being referenced. If APIGroup is
  // not specified, the specified Kind must be in the core API group. For any
  // other third-party types, APIGroup is required.
  // +optional
  optional string aPIGroup = 1;

  // kind is the type of resource being referenced.
  optional string kind = 2;

            spec:
              accessModes:
              - accessModesValue
              dataSource:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
              dataSourceRef:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
                namespace: namespaceValue

            spec:
              accessModes:
              - accessModesValue
              dataSource:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
              dataSourceRef:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
                namespace: namespaceValue

            spec:
              accessModes:
              - accessModesValue
              dataSource:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
              dataSourceRef:
                apiGroup: apiGroupValue
                kind: kindValue
                name: nameValue
                namespace: namespaceValue

func (in *IngressClassParametersReference) DeepCopyInto(out *IngressClassParametersReference) {
	*out = *in
	if in.APIGroup != nil {
		in, out := &in.APIGroup, &out.APIGroup
		*out = new(string)
		**out = **in
	}
	if in.Scope != nil {
		in, out := &in.Scope, &out.Scope
		*out = new(string)
		**out = **in
	}
	if in.Namespace != nil {

		ans = append(ans, &request.RequestInfo{
			IsResourceRequest: true,
			Verb:              verbs[coord%nv],
			APIGroup:          apiGroups[coord/nv%ng],
			Resource:          resources[coord/nv/ng%nr],
			Namespace:         namespaces[coord/nv/ng/nr]})
	}
	return ans
}

func genNRRIs(rng *rand.Rand, m int, verbs, urls []string) []*request.RequestInfo {
	nv := len(verbs)
	nu := len(urls)
	coords := chooseInts(rng, nv*nu, m)

	allErrs := field.ErrorList{}

	if params == nil {
		return allErrs
	}

	if params.APIGroup != nil {
		for _, msg := range validation.IsDNS1123Subdomain(*params.APIGroup) {
			allErrs = append(allErrs, field.Invalid(fldPath.Child("apiGroup"), *params.APIGroup, msg))
		}
	}

	if params.Kind == "" {
		allErrs = append(allErrs, field.Required(fldPath.Child("kind"), "kind is required"))

			results: []EvaluationResult{
				{
					EvalResult: celtypes.True,
				},
			},
			authorizer: newAuthzAllowMatch(authorizer.AttributesRecord{
				ResourceRequest: true,
				APIGroup:        "apps",
				Resource:        "deployments",
				Subresource:     "status",
				Namespace:       "test",
				Name:            "backend",
				Verb:            "create",
				APIVersion:      "*",
			}),

	}

	var (
		v1beta1Ctx      = genericapirequest.WithRequestInfo(genericapirequest.NewContext(), &genericapirequest.RequestInfo{APIGroup: "batch", APIVersion: "v1beta1", Resource: "cronjobs"})
		otherVersionCtx = genericapirequest.WithRequestInfo(genericapirequest.NewContext(), &genericapirequest.RequestInfo{APIGroup: "batch", APIVersion: "v100", Resource: "cronjobs"})
	)