ResidualTimeSeconds int64

	// ExternallyManaged defines if the certificate is externally managed.
	ExternallyManaged bool

	// CAName represents the name of the CA that signed the certificate.
	// This field is empty for self-signed, root CA certificates.
	CAName string

	// Missing represents if the certificate is missing.
	Missing bool
}

}

func autoConvert_v1alpha3_Certificate_To_output_Certificate(in *Certificate, out *output.Certificate, s conversion.Scope) error {
	out.Name = in.Name
	out.ExpirationDate = in.ExpirationDate
	out.ResidualTimeSeconds = in.ResidualTimeSeconds
	out.ExternallyManaged = in.ExternallyManaged
	out.CAName = in.CAName
	out.Missing = in.Missing
	return nil
}

            "type": "string"
          }
        },
        "required": [
          "name",
          "expression"
        ],
        "type": "object"
      },
      "io.k8s.api.admissionregistration.v1.MatchResources": {

// indicate what to do if errors are detected, and 'matchpkg' is a
// caller-provided function that can be used to select specific
// packages by name (if nil, then all packages are included).
func MakeCovDataReader(vis CovDataVisitor, indirs []string, verbosityLevel int, flags CovDataReaderFlags, matchpkg func(name string) bool) *CovDataReader {
	return &CovDataReader{
		vis:            vis,
		indirs:         indirs,
		matchpkg:       matchpkg,

	}
	return &flowcontrol.GroupSubject{Name: name}, []user.Info{ui}, []user.Info{skipper}
}

func genServiceAccount(rng *rand.Rand, pfx string) (*flowcontrol.ServiceAccountSubject, []user.Info, []user.Info) {
	ns := pfx + "-ns"
	name := pfx + "-n"
	mname := name
	if rng.Float32() < 0.05 {
		mname = "*"
	}
	mui := &user.DefaultInfo{
		Name:   fmt.Sprintf("system:serviceaccount:%s:%s", ns, name),

{
  "global": {
    "autoscalingv2API": true,
    "caAddress": "",
    "caName": "",
    "certSigners": [],
    "configCluster": false,
    "configValidation": true,
    "defaultPodDisruptionBudget": {
      "enabled": true
    },
    "defaultResources": {
      "requests": {
        "cpu": "10m"
      }
    },
    "enabled": false,
    "externalIstiod": false,
    "hub": "gcr.io/istio-testing",
    "imagePullPolicy": "",

{
  "global": {
    "autoscalingv2API": true,
    "caAddress": "",
    "caName": "",
    "certSigners": [],
    "configCluster": false,
    "configValidation": true,
    "defaultPodDisruptionBudget": {
      "enabled": true
    },
    "defaultResources": {
      "requests": {
        "cpu": "10m"
      }
    },
    "enabled": false,
    "externalIstiod": false,
    "hub": "gcr.io/istio-testing",
    "imagePullPolicy": "",

{
  "global": {
    "autoscalingv2API": true,
    "caAddress": "",
    "caName": "",
    "certSigners": [],
    "configCluster": false,
    "configValidation": true,
    "defaultPodDisruptionBudget": {
      "enabled": true
    },
    "defaultResources": {
      "requests": {
        "cpu": "10m"
      }
    },
    "enabled": false,
    "externalIstiod": false,
    "hub": "gcr.io/istio-testing",
    "imagePullPolicy": "",

{
  "global": {
    "autoscalingv2API": true,
    "caAddress": "",
    "caName": "",
    "certSigners": [],
    "configCluster": false,
    "configValidation": true,
    "defaultPodDisruptionBudget": {
      "enabled": true
    },
    "defaultResources": {
      "requests": {
        "cpu": "10m"
      }
    },
    "enabled": false,
    "externalIstiod": false,
    "hub": "gcr.io/istio-testing",
    "imagePullPolicy": "",

}

func (p *iimporter) doDecl(pkg *types.Package, name string) {
	// See if we've already imported this declaration.
	if obj := pkg.Scope().Lookup(name); obj != nil {
		return
	}

	off, ok := p.pkgIndex[pkg][name]
	if !ok {
		errorf("%v.%v not in index", pkg, name)
	}

	r := &importReader{p: p, currPkg: pkg}
	r.declReader.Reset(p.declData[off:])

	r.obj(name)
}