i = encodeVarintGenerated(dAtA, i, uint64(len(m.UserGroups[iNdEx])))
			i--
			dAtA[i] = 0x1a
		}
	}
	if len(m.Users) > 0 {
		for iNdEx := len(m.Users) - 1; iNdEx >= 0; iNdEx-- {
			i -= len(m.Users[iNdEx])
			copy(dAtA[i:], m.Users[iNdEx])
			i = encodeVarintGenerated(dAtA, i, uint64(len(m.Users[iNdEx])))
			i--
			dAtA[i] = 0x12
		}
	}
	i -= len(m.Level)
	copy(dAtA[i:], m.Level)

		authenticateFunc: func(req *http.Request) (*authenticator.Response, bool, error) {
			return &authenticator.Response{User: &user.DefaultInfo{Name: "test"}}, true, nil
		},
		attributesFunc: func(u user.Info, req *http.Request) authorizer.Attributes {
			return &authorizer.AttributesRecord{User: u}
		},
		authorizeFunc: func(a authorizer.Attributes) (decision authorizer.Decision, reason string, err error) {

			name: "duplicate expression",
			in: []api.UserValidationRule{
				{Expression: "user.username == 'foo'"},
				{Expression: "user.username == 'foo'"},
			},
			structuredAuthnFeatureEnabled: true,
			want:                          `issuer.userValidationRules[1].expression: Duplicate value: "user.username == 'foo'"`,
		},
		{
			name: "user validation rule is invalid when structured authn feature is disabled",

			wantResult: `{"request":{"uri":"/1","header":{"User-Agent":"test"}}}`,
			withJSON: `{"request":{"uri":"/1","header":{"User-Agent":"test"}}}
{"request":{"uri":"/2","header":{}}}`,
		},
		{
			name:       "is-not-missing",
			query:      `select * from s3object[*] as s where s.request.header['User-Agent'] is not missing`,

        // getDeclaredField to throw a NoSuchFieldException when the field is definitely there.
        // For these users fallback to a suboptimal implementation, based on synchronized. This will
        // be a definite performance hit to those users.
        thrownAtomicReferenceFieldUpdaterFailure = atomicReferenceFieldUpdaterFailure;
        helper = new SynchronizedHelper();
      }
    }

        // getDeclaredField to throw a NoSuchFieldException when the field is definitely there.
        // For these users fallback to a suboptimal implementation, based on synchronized. This will
        // be a definite performance hit to those users.
        thrownAtomicReferenceFieldUpdaterFailure = atomicReferenceFieldUpdaterFailure;
        helper = new SynchronizedHelper();
      }
    }

              "monitors": [
                "monitorsValue"
              ],
              "image": "imageValue",
              "fsType": "fsTypeValue",
              "pool": "poolValue",
              "user": "userValue",
              "keyring": "keyringValue",
              "secretRef": {
                "name": "nameValue"
              },
              "readOnly": true
            },
            "flexVolume": {

              "monitors": [
                "monitorsValue"
              ],
              "image": "imageValue",
              "fsType": "fsTypeValue",
              "pool": "poolValue",
              "user": "userValue",
              "keyring": "keyringValue",
              "secretRef": {
                "name": "nameValue"
              },
              "readOnly": true
            },
            "flexVolume": {

              "monitors": [
                "monitorsValue"
              ],
              "image": "imageValue",
              "fsType": "fsTypeValue",
              "pool": "poolValue",
              "user": "userValue",
              "keyring": "keyringValue",
              "secretRef": {
                "name": "nameValue"
              },
              "readOnly": true
            },
            "flexVolume": {

              "monitors": [
                "monitorsValue"
              ],
              "image": "imageValue",
              "fsType": "fsTypeValue",
              "pool": "poolValue",
              "user": "userValue",
              "keyring": "keyringValue",
              "secretRef": {
                "name": "nameValue"
              },
              "readOnly": true
            },
            "flexVolume": {