}
}

fun buildToolGradleParameters(
    isContinue: Boolean = true,
    maxParallelForks: String = "%maxParallelForks%",
): List<String> =
    listOf(
        // We pass the 'maxParallelForks' setting as 'workers.max' to limit the maximum number of executers even
        // if multiple test tasks run in parallel. We also pass it to the Gradle build as a maximum (maxParallelForks)

  * Stop 'kubectl drain' deleting pods with local storage.
  * Add `kubectl rollout status`
* Security/Auth
  * L7 LB controller and disk attach controllers run on master, so nodes do not need those privileges.
  * Setting TLS1.2 minimum
  * `kubectl create secret tls` command
  * Webhook Token Authenticator
  * **beta** PodSecurityPolicy objects limits use of security-sensitive features by pods.
* Kubectl

NetworkPolicy spec](https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy#before-you-begin),
and set `networkPolicy.enabled` to `true`.

For Kubernetes v1.5 & v1.6, you must also turn on NetworkPolicy by setting
the DefaultDeny namespace annotation. Note: this will enforce policy for *all* pods in the namespace:

```

    // ============================================================

    @Test
    public void test_setSkipDuplicateWords() {
        request.setSkipDuplicateWords(true);
        // Verify setting doesn't throw
        request.setSkipDuplicateWords(false);
    }

    @Test
    public void test_setSize() {
        request.setSize(5);
        request.setSize(100);
        request.setSize(1);

    }

    private void setConverter(NetServerEnum2Response response, int value) throws Exception {
        Field field = response.getClass().getDeclaredField("converter");
        field.setAccessible(true);
        field.setInt(response, value);
    }

    private int getNumEntries(NetServerEnum2Response response) throws Exception {
        Method method = getSuperclassMethod(response.getClass(), "getNumEntries");

        jcifs.SID[] arr = new jcifs.SID[] { s1, s2, s3 };

        // First call should resolve two (offset=0,length=2)
        doAnswer(inv -> {
            // Simulate resolve call by setting names/types and thus enabling cache population
            Object[] args = inv.getArguments();
            String server = (String) args[0];
            CIFSContext c = (CIFSContext) args[1];

	for i, testCase := range testCases {
		t.Run(fmt.Sprintf("Test: %d, ServerType: %s", i+1, testCase.serverType), func(t *testing.T) {
			runAllTests(testCase, &check{t, testCase.serverType})
		})
	}
}

// Setting up the test suite.
// Starting the Test server with temporary backend.
func (s *TestSuiteCommon) SetUpSuite(c *check) {
	if s.secure {
		cert, key, err := generateTLSCertKey("127.0.0.1")
		c.Assert(err, nil)

 * [Adam Langley's Weblog][langley]. Pins are either base64 SHA-256 hashes as in
 * [HTTP Public Key Pinning (HPKP)][rfc_7469] or SHA-1 base64 hashes as in Chromium's
 * [static certificates][static_certificates].
 *
 * ## Setting up Certificate Pinning
 *
 * The easiest way to pin a host is turn on pinning with a broken configuration and read the
 * expected configuration when the connection fails. Be sure to do this on a trusted network, and

     * When enabled, frequently searched terms are tracked and displayed.
     */
    @Size(max = 10)
    public String popularWord;

    /**
     * Character encoding to use for CSV file exports.
     * This setting affects the encoding of downloaded CSV files.
     */
    @Required
    @Size(max = 20)
    public String csvFileEncoding;

    /**
     * Number of days to keep search logs before purging.

    commit_in_place: Annotated[
        bool, typer.Option(envvar="COMMIT_IN_PLACE", show_default=True)
    ] = False,
) -> None:
    print("Setting up GitHub Actions git user")
    repo = git.Repo(Path(__file__).absolute().parent.parent)
    if not repo.is_dirty(untracked_files=True):
        print("Repository is clean, no changes to commit")
        return