rules:
            - any: true
        principals:
        - andIds:
            ids:
            - orIds:
                ids:
                - authenticated:
                    principalName:
                      safeRegex:
                        regex: .*/ns/istio-system/.*
            - orIds:
                ids:
                - authenticated:
                    principalName:

        succeeds("captureService")

        when:
        triggerFile << "change"

        then:
        buildTriggeredAndSucceeded()

        and:
        def ids = idFile.readLines()
        ids.size() == 2
        ids[0] == ids[1]

        where:
        service                          | _
        "WorkerProcessFactory"           | _
        "UnscopedCacheBuilderFactory"    | _

        then:
        succeeds("generateGrammarSource")
        !test1TokenFile.exists()
        !test1LexerFile.exists()
        !test1ParserFile.exists()
    }

    def grammar(String... ids) {
        ids.each { id ->
            file("grammar-builder/src/main/antlr/${id}.g") << """grammar ${id};
            list    :   item (item)*
                    ;

            item    :
                ID

    int64_t next_id = 0;
    llvm::SmallDenseMap<Value, int64_t, 8> ids;

    auto assign_id = [&](Value value) {
      if (ids.find(value) == ids.end()) ids.insert({value, next_id++});
    };

    auto get_id = [&](Value value) -> int64_t {
      auto it = ids.find(value);
      assert(it != ids.end());
      return it->second;
    };

	// array and then call "f" on it.
	for pidx, p := range mm.pkgs {
		fids := make([]int, 0, len(p.ctab))
		for fid := range p.ctab {
			fids = append(fids, int(fid))
		}
		sort.Ints(fids)
		if *verbflag >= 4 {
			fmt.Printf("fids for pk=%d: %+v\n", pidx, fids)
		}
		for _, fid := range fids {
			fp := p.ctab[uint32(fid)]
			if *verbflag >= 4 {

/**
 * Exception class used when a GPG IDs were not correct.
 *
 * <p>
 * An example is using short/long IDs instead of fingerprints when trusting keys
 */
public class InvalidGpgKeyIdsException extends GradleException {
    private final List<String> wrongKeys;

    /**
     * Creates a new exception with a list of incorrect keys.
     *

            List<ComponentArtifactIdentifier> ids = getArtifactIds().get();
            List<ResolvedVariantResult> variants = getArtifactVariants().get();
            List<RegularFile> files = getArtifactFiles().get();
            for (int index = 0; index < ids.size(); index++) {
                ComponentArtifactIdentifier id = ids.get(index);
                ResolvedVariantResult variant = variants.get(index);

            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /another
        principals:
        - andIds:
            ids:
            - any: true
  shadowRules:
    policies:
      ns[foo]-policy[httpbin-1]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:

            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /another
        principals:
        - andIds:
            ids:
            - any: true
  shadowRules:
    policies:
      ns[foo]-policy[httpbin-1]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:

    policies:
      ns[foo]-policy[httpbin-deny]-rule[0]:
        permissions:
        - andRules:
            rules:
            - any: true
        principals:
        - andIds:
            ids:
            - orIds:
                ids:
                - authenticated:
                    principalName:
                      exact: spiffe://deny