# See the OWNERS docs at https://go.k8s.io/owners

approvers:
  - sig-auth-node-isolation-approvers
reviewers:
  - sig-auth-node-isolation-reviewers
labels:

# See the OWNERS docs at https://go.k8s.io/owners

approvers:
  - sig-auth-node-isolation-approvers
reviewers:
  - sig-auth-node-isolation-reviewers
labels:

=== Step 3. Change the isolation mode

The isolation mode controls how strongly Gradle will isolate items of work from each other and the rest of the Gradle runtime.

There are three methods on `WorkerExecutor` that control this:

1. `noIsolation()`
2. `classLoaderIsolation()`
3. `processIsolation()`

import org.gradle.internal.extensions.core.popSingletonProperty
import org.gradle.internal.extensions.core.setSingletonProperty
import org.gradle.internal.cc.impl.isolation.IsolatedActionDeserializer
import org.gradle.internal.cc.impl.isolation.IsolatedActionSerializer
import org.gradle.internal.cc.impl.isolation.SerializedIsolatedActionGraph
import org.gradle.internal.serialize.graph.IsolateOwner
import org.gradle.internal.cc.base.serialize.IsolateOwners

class WorkerExecutorServicesIntegrationTest extends AbstractWorkerExecutorIntegrationTest {
    def "workers cannot inject internal services using #isolationMode isolation"() {
        fixture.workActionThatCreatesFiles.constructorArgs = "org.gradle.api.internal.file.FileOperations fileOperations"
        fixture.withWorkActionClassInBuildSrc()

        buildFile << """

		dopts := driver.TxOptions{}
		if opts != nil {
			dopts.Isolation = driver.IsolationLevel(opts.Isolation)
			dopts.ReadOnly = opts.ReadOnly
		}
		return ciCtx.BeginTx(ctx, dopts)
	}

	if opts != nil {
		// Check the transaction level. If the transaction level is non-default
		// then return an error here as the BeginTx driver value is not supported.
		if opts.Isolation != LevelDefault {

rootProject.name = 'classloader-isolation'...

rootProject.name = 'no-isolation'...

rootProject.name = 'process-isolation'...

rootProject.name = "no-isolation"...