def missing = emptyRepo.module("org.utils", "impl", "1.3").allowAll()
        missing.rootMetaData.allowGetOrHead()
        def missingDir = emptyRepo.directory("org.utils", "impl")
        missingDir.allowGet()

        def m = mavenHttpRepo.module("org.utils", "impl", '1.3')
            .allowAll()
            .publish()
        m.rootMetaData.file.delete()

        mavenHttpRepo.module("test", "provider", "1.0").publish().allowAll()
    }

    def expectDownloadNoArtifacts() {
        mavenHttpRepo.module("test", "provider", "1.0")
            .hasPackaging("pom")
            .hasType("pom")
            .dependsOn("test", "other", "1.0")
            .publish()
            .allowAll()
        mavenHttpRepo.module("test", "other", "1.0")

            }
            'org:b:1.0' {
                allowAll()
            }
            'org:a:1.0' {
                allowAll()
            }
            'align:first:2.0' {
                allowAll()
            }
            'align:second:1.0' {
                allowAll()
            }
            'align:second:2.0' {
                allowAll()
            }

        withColorVariants(mavenHttpRepo.module("org.slf4j", "slf4j-api", "1.7.25")).publish().allowAll()
        withColorVariants(mavenHttpRepo.module("junit", "junit", "4.11"))
            .dependsOn("hamcrest", "hamcrest-core", "1.3")
            .publish()
            .allowAll()

	// Credentials stores all credentials in the cluster
	Credentials credentials.Controller

	// Domain for the cluster. Typically, cluster.local
	Domain  string
	Context GatewayContext
}

type Grants struct {
	AllowAll     bool
	AllowedNames sets.String
}

type AllowedReferences map[Reference]map[Reference]*Grants

func (refs AllowedReferences) SecretAllowed(resourceName string, namespace string) bool {

        fileInReadReadOnlyCache("modules-${CacheLayout.MODULES.version}/files-${CacheLayout.FILE_STORE.version}/org.readonly/parent/1.0").eachFileRecurse { it.delete() }
        withReadOnlyCache()
        other.allowAll()
        parent.allowAll()
        succeeds ':checkDeps'

        then:
        noExceptionThrown()
    }


    @Override
    List<MavenHttpModule> getModulesInReadOnlyCache(MavenHttpRepository repo) {

    ) {
        pluginBuilder.with {
            addPlugin(impl, PLUGIN_ID)
            publishAs(GROUP, ARTIFACT, VERSION, pluginRepo, executer).allowAll().pluginModule as MavenHttpModule
        }
    }

    MavenHttpModule publishSettingPlugin(

        def invalidLocation = executer.gradleUserHomeDir.file(cachePath + invalidPath).canonicalFile

        testDep.allowAll()
        abusedCoordinates.allowAll()
        server.allowGetOrHead('/repo/org/.ssh/pwned.txt', fakeDep)

        and:
        withValidJavaSource()
        buildWithJavaLibraryAndMavenRepo()

        and:

                        module.rootMetaData.expectHead()
                        break
                    case InteractionExpectation.MAYBE:
                        module.rootMetaData.allowAll()
                        break
                }

            } else if (module instanceof IvyModule) {
                def directoryList = repository.directoryList(module.organisation, module.module)

        def module = mavenHttpRepo.module('group', 'projectA', '1.2').publish()

        and:
        writeBuildFile()
        failedResolve.prepare()

        when:
        module.allowAll()

        then:
        executer.withStackTraceChecksDisabled()
        fails('checkDeps')

        and:
        failedResolve.assertFailurePresent(failure)