out.Kind = flowcontrol.SubjectKind(in.Kind)
	out.User = (*flowcontrol.UserSubject)(unsafe.Pointer(in.User))
	out.Group = (*flowcontrol.GroupSubject)(unsafe.Pointer(in.Group))
	out.ServiceAccount = (*flowcontrol.ServiceAccountSubject)(unsafe.Pointer(in.ServiceAccount))
	return nil
}

// Convert_v1_Subject_To_flowcontrol_Subject is an autogenerated conversion function.

	out.Kind = flowcontrol.SubjectKind(in.Kind)
	out.User = (*flowcontrol.UserSubject)(unsafe.Pointer(in.User))
	out.Group = (*flowcontrol.GroupSubject)(unsafe.Pointer(in.Group))
	out.ServiceAccount = (*flowcontrol.ServiceAccountSubject)(unsafe.Pointer(in.ServiceAccount))
	return nil
}

// Convert_v1beta1_Subject_To_flowcontrol_Subject is an autogenerated conversion function.

	out.Kind = flowcontrol.SubjectKind(in.Kind)
	out.User = (*flowcontrol.UserSubject)(unsafe.Pointer(in.User))
	out.Group = (*flowcontrol.GroupSubject)(unsafe.Pointer(in.Group))
	out.ServiceAccount = (*flowcontrol.ServiceAccountSubject)(unsafe.Pointer(in.ServiceAccount))
	return nil
}

// Convert_v1beta2_Subject_To_flowcontrol_Subject is an autogenerated conversion function.

		{
			name:                  "add pod info",
			driver:                "info",
			volumeContext:         nil,
			expectedVolumeContext: map[string]string{"csi.storage.k8s.io/pod.uid": "test-pod", "csi.storage.k8s.io/serviceAccount.name": "test-service-account", "csi.storage.k8s.io/pod.name": "test-pod", "csi.storage.k8s.io/pod.namespace": "test-ns", "csi.storage.k8s.io/ephemeral": "false"},
		},
		{

	if s3Err != ErrNone {
		writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(s3Err), r.URL)
		return
	}

	serviceAccount := mux.Vars(r)["accessKey"]
	if serviceAccount == "" {
		writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrAdminInvalidArgument), r.URL)
		return
	}

	if serviceAccount == siteReplicatorSvcAcc && globalSiteReplicationSys.isEnabled() {

		ConfigNamespace: "nsa",
		Labels: map[string]string{
			"app":                      "prod-app",
			label.SecurityTlsMode.Name: "mutual",
		},
		Metadata: &model.NodeMetadata{
			ServiceAccount: "account",
			ClusterID:      clusterID,
			Labels: map[string]string{
				"app":                      "prod-app",
				label.SecurityTlsMode.Name: "mutual",
			},
		},
	})

    kube::etcd::start
}

function set_service_accounts {
    SERVICE_ACCOUNT_LOOKUP=${SERVICE_ACCOUNT_LOOKUP:-true}
    SERVICE_ACCOUNT_KEY=${SERVICE_ACCOUNT_KEY:-${TMP_DIR}/kube-serviceaccount.key}
    # Generate ServiceAccount key if needed
    if [[ ! -f "${SERVICE_ACCOUNT_KEY}" ]]; then
      mkdir -p "$(dirname "${SERVICE_ACCOUNT_KEY}")"
      openssl genrsa -out "${SERVICE_ACCOUNT_KEY}" 2048 2>/dev/null
    fi
}

	// TrustDomain of the workload. May be elided if this is the mesh wide default (typically cluster.local)
	TrustDomain string `protobuf:"bytes,6,opt,name=trust_domain,json=trustDomain,proto3" json:"trust_domain,omitempty"`
	// ServiceAccount of the workload. May be elided if this is "default"

				Generation:        obj.Generation,
			},
			Spec: &obj.Spec,
		}
	},
	gvk.ServiceAccount: func(r runtime.Object) config.Config {
		obj := r.(*k8sioapicorev1.ServiceAccount)
		return config.Config{
			Meta: config.Meta{
				GroupVersionKind:  gvk.ServiceAccount,
				Name:              obj.Name,
				Namespace:         obj.Namespace,
				Labels:            obj.Labels,

        "dnsPolicy": "dnsPolicyValue",
        "nodeSelector": {
          "nodeSelectorKey": "nodeSelectorValue"
        },
        "serviceAccountName": "serviceAccountNameValue",
        "serviceAccount": "serviceAccountValue",
        "automountServiceAccountToken": true,
        "nodeName": "nodeNameValue",
        "hostNetwork": true,
        "hostPID": true,
        "hostIPC": true,