},
		},
	}
}

// Groups adds the specified groups as the subjects of the ClusterRoleBinding.
func (r *ClusterRoleBindingBuilder) Groups(groups ...string) *ClusterRoleBindingBuilder {
	for _, group := range groups {
		r.ClusterRoleBinding.Subjects = append(r.ClusterRoleBinding.Subjects, Subject{Kind: GroupKind, APIGroup: GroupName, Name: group})
	}
	return r
}

		if err1 != 0 {
			goto childerror
		}
	}

	// User and groups
	if cred = sys.Credential; cred != nil {
		ngroups = uintptr(len(cred.Groups))
		groups = uintptr(0)
		if ngroups > 0 {
			groups = uintptr(unsafe.Pointer(&cred.Groups[0]))
		}
		if !cred.NoSetGroups {
			err1 = setgroups1(ngroups, groups)
			if err1 != 0 {
				goto childerror
			}
		}

			},
			expectErr: "runtime-config invalid key",
		},
		{
			name: "test when unknown api groups",
			testOptions: &APIEnablementOptions{
				RuntimeConfig: cliflag.ConfigurationMap{"api/v1": "true"},
			},
			expectErr: "unknown api groups",
		},
		{
			name: "test when valid api groups",
			testOptions: &APIEnablementOptions{
				RuntimeConfig: cliflag.ConfigurationMap{"apiregistration.k8s.io/v1beta1": "true"},

        return delegate.nothing();
    }

    @Override
    public ExcludeEverything everything() {
        return delegate.everything();
    }

    @Override
    public GroupExclude group(String group) {
        return delegate.group(group);
    }

    @Override
    public ModuleExclude module(String module) {
        return delegate.module(module);
    }

    @Override

    def 'groups can be accessed in any order'() {
        given:
        def subject = new OrdinalGroupFactory()

        when:
        def g2 = subject.group(2)
        def g0 = subject.group(0)
        def g1 = subject.group(1)

        then:
        subject.allGroups == [g0, g1, g2]
    }

    def 'returns the same group for the same ordinal'() {
        given:

			name:  "TokenIssuer2",
			token: TokenIssuer2,
			wantClaims: map[string]any{
				"groups": []any{"group-2"},
				"iss":    "******@****.***",
				"sub":    "sub-2",
				"exp":    4715782783.0,
			},
		},
		{
			name:  "TokenExpired",
			token: TokenExpired,
			wantClaims: map[string]any{
				"groups": []any{"group-1"},
				"iss":    "******@****.***",
				"sub":    "sub-1",

  "request": {
    "uid": "uidValue",
    "kind": {
      "group": "groupValue",
      "version": "versionValue",
      "kind": "kindValue"
    },
    "resource": {
      "group": "groupValue",
      "version": "versionValue",
      "resource": "resourceValue"
    },
    "subResource": "subResourceValue",
    "requestKind": {
      "group": "groupValue",
      "version": "versionValue",
      "kind": "kindValue"

    spec:
      replicas: 1
    status:
      available: 1
  requestKind:
    group: groupValue
    kind: kindValue
    version: versionValue
  requestResource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  requestSubResource: requestSubResourceValue
  resource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  subResource: subResourceValue

    spec:
      replicas: 1
    status:
      available: 1
  requestKind:
    group: groupValue
    kind: kindValue
    version: versionValue
  requestResource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  requestSubResource: requestSubResourceValue
  resource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  subResource: subResourceValue

    spec:
      replicas: 1
    status:
      available: 1
  requestKind:
    group: groupValue
    kind: kindValue
    version: versionValue
  requestResource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  requestSubResource: requestSubResourceValue
  resource:
    group: groupValue
    resource: resourceValue
    version: versionValue
  subResource: subResourceValue