rules:
  - selectorRegexp: k8s[.]io
    allowedPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-root
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-both
    forbiddenPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/forbidden-by-root

    allowedPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/bbb
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-sub
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-both
    forbiddenPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/forbidden-by-sub

package allowed

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/allowed/a2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/forbidden/f2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/neither/n2"
)

package allowed

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/allowed/a2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/forbidden/f2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/neither/n2"
)

		expectedOutput   string
		expectError      bool
	}{
		// scenario 1: a service name along with a namespace resolves
		{serviceName: "ross", serviceNamespace: "andromeda", port: 443, expectedOutput: "https://ross.andromeda.svc:443"},
		// scenario 2: a service name without a namespace does not resolve
		{serviceName: "ross", expectError: true},
		// scenario 3: cannot resolve an empty service name
		{serviceNamespace: "andromeda", expectError: true},

package allowed

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/allowed/a2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/forbidden/f2"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/neither/n2"
)

## Purpose

`import-boss` enforces optional import restrictions between packages.  This is
useful to manage the dependency graph within a large repository, such as
[kubernetes](https://github.com/kubernetes/kubernetes).

## How does it work?

When a package is verified, `import-boss` looks for a file called
`.import-restrictions` in the same directory and all parent directories, up to
the module root (defined by the presence of a go.mod file).  These files

    <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>

    <link rel="icon" type="image/png" href="https://oss.sonatype.org/favicon.png">
    <!--[if IE]>
    <link rel="SHORTCUT ICON" href="https://oss.sonatype.org/favicon.ico"/>
    <![endif]-->

    <link rel="stylesheet" href="https://oss.sonatype.org/static/css/Sonatype-content.css?2.14.13-01" type="text/css" media="screen" title="no title" charset="utf-8">
  </head>

func newBoss(pkgs []*packages.Package) *ImportBoss {
	boss := &ImportBoss{
		incomingImports:           map[string][]string{},
		transitiveIncomingImports: map[string][]string{},
	}

	for _, pkg := range pkgs {
		// Accumulate imports
		for imp := range pkg.Imports {
			boss.incomingImports[imp] = append(boss.incomingImports[imp], pkg.PkgPath)
		}
	}

rules:
  - selectorRegexp: k8s[.]io
    allowedPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/allowed
    forbiddenPrefixes: