rules:
  - apiGroups: [""]
    resources:
      - pods
      - nodes
      - namespaces
    verbs:
      - get
      - watch
      - list
  # Watch for changes to Kubernetes NetworkPolicies.
  - apiGroups: ["networking.k8s.io"]
    resources:
      - networkpolicies
    verbs:
      - watch
      - list
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:

}

void RemoveVariables(llvm::ArrayRef<VarHandleOp> vars) {
  // TODO(b/160906885): Repalce the following code with an non-recursive one.
  llvm::SmallVector<Operation*, 4> erase_list;
  llvm::SmallPtrSet<Operation*, 4> dead_ops;

  // Marks all the variables dead.
  dead_ops.insert(vars.begin(), vars.end());

  // Removes relevant ops in topological order.
  for (auto& op : vars) RecursiveRemove(op, erase_list, dead_ops);

		line = line[:i]
	}

	verb := line
	if i := strings.IndexFunc(verb, unicode.IsSpace); i >= 0 {
		verb = verb[:i]
		if line[i] != ' ' && line[i] != '\t' && line[i] != '\n' {
			r, _ := utf8.DecodeRuneInString(line[i:])
			check.pass.Reportf(pos, "invalid space %#q in %s directive", r, verb)
		}
	}

	switch verb {
	default:
		// TODO: Use the go language version for the file.

  rules:
  - nonResourceRules:
    - nonResourceURLs:
      - nonResourceURLsValue
      verbs:
      - verbsValue
    resourceRules:
    - apiGroups:
      - apiGroupsValue
      clusterScope: true
      namespaces:
      - namespacesValue
      resources:
      - resourcesValue
      verbs:
      - verbsValue
    subjects:
    - group:
        name: nameValue
      kind: kindValue

  "status": {
    "resourceRules": [
      {
        "verbs": [
          "verbsValue"
        ],
        "apiGroups": [
          "apiGroupsValue"
        ],
        "resources": [
          "resourcesValue"
        ],
        "resourceNames": [
          "resourceNamesValue"
        ]
      }
    ],
    "nonResourceRules": [
      {
        "verbs": [
          "verbsValue"
        ],

  incomplete: true
  nonResourceRules:
  - nonResourceURLs:
    - nonResourceURLsValue
    verbs:
    - verbsValue
  resourceRules:
  - apiGroups:
    - apiGroupsValue
    resourceNames:
    - resourceNamesValue
    resources:
    - resourcesValue
    verbs:

            "serviceAccount": {
              "namespace": "namespaceValue",
              "name": "nameValue"
            }
          }
        ],
        "resourceRules": [
          {
            "verbs": [
              "verbsValue"
            ],
            "apiGroups": [
              "apiGroupsValue"
            ],
            "resources": [
              "resourcesValue"
            ],

  rules:
  - nonResourceRules:
    - nonResourceURLs:
      - nonResourceURLsValue
      verbs:
      - verbsValue
    resourceRules:
    - apiGroups:
      - apiGroupsValue
      clusterScope: true
      namespaces:
      - namespacesValue
      resources:
      - resourcesValue
      verbs:
      - verbsValue
    subjects:
    - group:
        name: nameValue
      kind: kindValue

# limitations under the License.

# Returns the total number of Linux and Windows nodes in the cluster.
#
# Vars assumed:
#   NUM_NODES
#   NUM_WINDOWS_NODES
function get-num-nodes {
  echo "$((NUM_NODES + NUM_WINDOWS_NODES))"
}

# Vars assumed:
#   NUM_NODES
#   NUM_WINDOWS_NODES
function get-master-size {
  local suggested_master_size=2
  if [[ "$(get-num-nodes)" -gt "10" ]]; then

  selfLink: selfLinkValue
  uid: uidValue
spec:
  nonResourceAttributes:
    path: pathValue
    verb: verbValue
  resourceAttributes:
    group: groupValue
    name: nameValue
    namespace: namespaceValue
    resource: resourceValue
    subresource: subresourceValue
    verb: verbValue
    version: versionValue
status:
  allowed: true
  denied: true
  evaluationError: evaluationErrorValue