match, err := evaluator.Matches(&resourceQuota, inputObject)
		if err != nil {
			klog.ErrorS(err, "Error occurred while matching resource quota against input object",
				"resourceQuota", resourceQuota)
			return quotas, err
		}
		if !match {
			continue
		}

		hardResources := quota.ResourceNames(resourceQuota.Status.Hard)
		restrictedResources := evaluator.MatchingResources(hardResources)

	// new admission plugins should generally be inserted above here
	// webhook, resourcequota, and deny plugins must go at the end

	mutatingwebhook.PluginName,           // MutatingAdmissionWebhook
	validatingadmissionpolicy.PluginName, // ValidatingAdmissionPolicy
	validatingwebhook.PluginName,         // ValidatingAdmissionWebhook
	resourcequota.PluginName,             // ResourceQuota
	deny.PluginName,                      // AlwaysDeny
}

			core.ResourceLimitsEphemeralStorage:   resource.MustParse("10000"),
		},
	}
	resourceQuota := &core.ResourceQuota{
		ObjectMeta: metav1.ObjectMeta{
			Name:      "abc",
			Namespace: "foo",
		},
		Spec: spec,
	}

	if errs := ValidateResourceQuota(resourceQuota); len(errs) != 0 {
		t.Errorf("expected success: %v", errs)
	}
}

	// Services, number
	ResourceServices ResourceName = "services"
	// ReplicationControllers, number
	ResourceReplicationControllers ResourceName = "replicationcontrollers"
	// ResourceQuotas, number
	ResourceQuotas ResourceName = "resourcequotas"
	// ResourceSecrets, number
	ResourceSecrets ResourceName = "secrets"
	// ResourceConfigMaps, number
	ResourceConfigMaps ResourceName = "configmaps"

        "x-kubernetes-group-version-kind": {
          "group": "",
          "kind": "ResourceQuota",
          "version": "v1"
        }
      }
    },
    "/api/v1/namespaces/{namespace}/resourcequotas/{name}": {
      "delete": {
        "description": "delete a ResourceQuota",
        "operationId": "deleteCoreV1NamespacedResourceQuota",
        "parameters": [
          {

          "kind": "ResourceQuota",
          "version": "v1"
        }
      }
    },
    "/api/v1/namespaces/{namespace}/resourcequotas/{name}": {
      "delete": {
        "consumes": [
          "*/*"
        ],
        "description": "delete a ResourceQuota",
        "operationId": "deleteCoreV1NamespacedResourceQuota",
        "parameters": [
          {

	ReplicationControllerController              = "replicationcontroller-controller"
	PodGarbageCollectorController                = "pod-garbage-collector-controller"
	ResourceQuotaController                      = "resourcequota-controller"
	NamespaceController                          = "namespace-controller"
	ServiceAccountController                     = "serviceaccount-controller"

  # Start kube-apiserver
  kube::log::status "Starting kube-apiserver"

  # Admission Controllers to invoke prior to persisting objects in cluster
  ENABLE_ADMISSION_PLUGINS="LimitRanger,ResourceQuota"
  DISABLE_ADMISSION_PLUGINS="ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,StorageObjectInUseProtection"

          "kind": "ResourceQuota",
          "version": "v1"
        }
      }
    },
    "/api/v1/namespaces/{namespace}/resourcequotas/{name}": {
      "delete": {
        "consumes": [
          "*/*"
        ],
        "description": "delete a ResourceQuota",
        "operationId": "deleteCoreV1NamespacedResourceQuota",
        "parameters": [
          {

o.io/owning-resource: {{ .Values.ownerName | default "unknown" }} operator.istio.io/component: "Cni" manifests/charts/istio-cni/templates/resourcequota.yaml {{- if .Values.cni.resourceQuotas.enabled }} apiVersion: v1 kind: ResourceQuota metadata: name: istio-cni-resource-quota namespace: {{ .Release.Namespace }} spec: hard: pods: {{ .Values.cni.resourceQuotas.pods | quote }} scopeSelector: matchExpressions: - operator: In scopeName: PriorityClass values: - system-node-critical {{- end }} manifes...