subresource: "approval",
				oldObj:      &certificatesapi.CertificateSigningRequestList{},
				operation:   admission.Update,
			},
			allowed: false,
		},
		"reject requests if looking up permissions fails": {
			attributes: &testAttributes{
				resource:    certificatesapi.Resource("certificatesigningrequests"),
				subresource: "approval",

func TestResourceAttributesFrom(t *testing.T) {
	knownResourceAttributesNames := sets.NewString(
		// Fields we copy in ResourceAttributesFrom
		"Verb",
		"Namespace",
		"Group",
		"Version",
		"Resource",
		"Subresource",
		"Name",

		// Fields we copy in NonResourceAttributesFrom
		"Path",
		"Verb",
	)
	reflect.TypeOf(authorizationapi.ResourceAttributes{}).FieldByNameFunc(func(name string) bool {

          ],
          "shortNames": [
            "shortNamesValue"
          ],
          "categories": [
            "categoriesValue"
          ],
          "subresources": [
            {
              "subresource": "subresourceValue",
              "responseKind": {
                "group": "groupValue",
                "version": "versionValue",
                "kind": "kindValue"
              },

          ],
          "shortNames": [
            "shortNamesValue"
          ],
          "categories": [
            "categoriesValue"
          ],
          "subresources": [
            {
              "subresource": "subresourceValue",
              "responseKind": {
                "group": "groupValue",
                "version": "versionValue",
                "kind": "kindValue"
              },

    shortNames:
    - shortNamesValue
    singularResource: singularResourceValue
    subresources:
    - acceptedTypes:
      - group: groupValue
        kind: kindValue
        version: versionValue
      responseKind:
        group: groupValue
        kind: kindValue
        version: versionValue
      subresource: subresourceValue
      verbs:
      - verbsValue
    verbs:
    - verbsValue

  repeated string categories = 7;

  // subresources is a list of subresources provided by this resource. Subresources are located at /apis/<APIGroupDiscovery.objectMeta.name>/<APIVersionDiscovery.version>/<APIResourceDiscovery.Resource>/name-of-instance/<APIResourceDiscovery.subresources[i].subresource>
  // +listType=map
  // +listMapKey=subresource
  repeated APISubresourceDiscovery subresources = 8;
}

		return true
	}

	apiGroup := attrs.GetAPIGroup()
	resource := attrs.GetResource()
	subresource := attrs.GetSubresource()
	combinedResource := resource
	// If subresource, the resource in the policy must match "(resource)/(subresource)"
	if subresource != "" {
		combinedResource = resource + "/" + subresource
	}

	name := attrs.GetName()

	for _, gr := range r.Resources {
		if gr.Group == apiGroup {

			if err != nil {
				t.Fatalf("Unexpected extract error: %v", err)
			}
			if !equality.Semantic.DeepEqual(out, tc.expectedOut) {
				t.Fatalf("Expected output did not match actual output: %s", cmp.Diff(out, tc.expectedOut))
			}
		})
	}
}

func applyFieldsEntry(fieldManager string, fieldsJSON string, subresource string) metav1.ManagedFieldsEntry {

  repeated string categories = 7;

  // subresources is a list of subresources provided by this resource. Subresources are located at /apis/<APIGroupDiscovery.objectMeta.name>/<APIVersionDiscovery.version>/<APIResourceDiscovery.Resource>/name-of-instance/<APIResourceDiscovery.subresources[i].subresource>
  // +listType=map
  // +listMapKey=subresource
  repeated APISubresourceDiscovery subresources = 8;
}

func NewDefaultFieldManager(typeConverter TypeConverter, objectConverter runtime.ObjectConvertor, objectDefaulter runtime.ObjectDefaulter, objectCreater runtime.ObjectCreater, kind schema.GroupVersionKind, hub schema.GroupVersion, subresource string, resetFields map[fieldpath.APIVersion]*fieldpath.Set) (*FieldManager, error) {
	f, err := internal.NewStructuredMergeManager(typeConverter, objectConverter, objectDefaulter, kind.GroupVersion(), hub, resetFields)