}

func autoConvert_v1beta1_PolicySpec_To_abac_PolicySpec(in *PolicySpec, out *abac.PolicySpec, s conversion.Scope) error {
	out.User = in.User
	out.Group = in.Group
	out.Readonly = in.Readonly
	out.APIGroup = in.APIGroup
	out.Resource = in.Resource
	out.Namespace = in.Namespace
	out.NonResourcePath = in.NonResourcePath
	return nil
}

// Convert_v1beta1_PolicySpec_To_abac_PolicySpec is an autogenerated conversion function.

	resource, apiGroup, apiVersion := "*", "*", "*"

	if policy, err := v.policyGetter.GetValidatingAdmissionPolicy(ctx, binding.Spec.PolicyName); err == nil && policy.Spec.ParamKind != nil {
		paramKind := policy.Spec.ParamKind
		if gv, err := schema.ParseGroupVersion(paramKind.APIVersion); err == nil {
			// we only need to authorize the parsed group/version
			apiGroup = gv.Group
			apiVersion = gv.Version

kind: ClusterRoleBinding
metadata:
  name: npd-binding
  labels:
    kubernetes.io/cluster-service: "true"
    addonmanager.kubernetes.io/mode: Reconcile
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:node-problem-detector
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: User

    kind: kindValue
    name: nameValue
    uid: uidValue
  resourceVersion: resourceVersionValue
  selfLink: selfLinkValue
  uid: uidValue
roleRef:
  apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue
subjects:
- apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue

        "fieldsV1": {},
        "subresource": "subresourceValue"
      }
    ]
  },
  "subjects": [
    {
      "kind": "kindValue",
      "apiGroup": "apiGroupValue",
      "name": "nameValue",
      "namespace": "namespaceValue"
    }
  ],
  "roleRef": {
    "apiGroup": "apiGroupValue",
    "kind": "kindValue",
    "name": "nameValue"
  }

    kind: kindValue
    name: nameValue
    uid: uidValue
  resourceVersion: resourceVersionValue
  selfLink: selfLinkValue
  uid: uidValue
roleRef:
  apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue
subjects:
- apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue

    kind: kindValue
    name: nameValue
    uid: uidValue
  resourceVersion: resourceVersionValue
  selfLink: selfLinkValue
  uid: uidValue
roleRef:
  apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue
subjects:
- apiGroup: apiGroupValue
  kind: kindValue
  name: nameValue

        "fieldsV1": {},
        "subresource": "subresourceValue"
      }
    ]
  },
  "subjects": [
    {
      "kind": "kindValue",
      "apiGroup": "apiGroupValue",
      "name": "nameValue",
      "namespace": "namespaceValue"
    }
  ],
  "roleRef": {
    "apiGroup": "apiGroupValue",
    "kind": "kindValue",
    "name": "nameValue"
  }

	}

	paramKind := policy.Spec.ParamKind
	// default to requiring permissions on all group/version/resources
	resource, apiGroup, apiVersion := "*", "*", "*"
	if gv, err := schema.ParseGroupVersion(paramKind.APIVersion); err == nil {
		// we only need to authorize the parsed group/version
		apiGroup = gv.Group
		apiVersion = gv.Version
		if gvr, err := v.resourceResolver.Resolve(gv.WithKind(paramKind.Kind)); err == nil {

// To consume the resource, there must exist an associated quota that limits
// its consumption.
type LimitedResource struct {

	// APIGroup is the name of the APIGroup that contains the limited resource.
	// +optional
	APIGroup string `json:"apiGroup,omitempty"`

	// Resource is the name of the resource this rule applies to.
	// For example, if the administrator wants to limit consumption