ipBlocks: ["1.2.3.4"]
        remoteIpBlocks: ["172.18.4.0/22"]
        notPrincipals: ["not-principal", "*not-principal-suffix", "not-principal-prefix*", "*"]
        notRequestPrincipals: ["not-requestPrincipals"]
        notNamespaces: ["not-ns", "*not-ns-suffix", "not-ns-prefix*", "*"]
        notIpBlocks: ["9.0.0.1"]
        notRemoteIpBlocks: ["192.168.244.139"]
    to:
    - operation:

// Verify that various kinds of "imported and not used"
// errors are caught by the compiler.
// Does not compile.

package main

// standard
import "fmt"	// ERROR "imported and not used.*fmt|\x22fmt\x22 imported and not used"

// renamed
import X "math"	// ERROR "imported and not used.*math|\x22math\x22 imported as X and not used"

// import dot
import . "bufio"	// ERROR "imported and not used.*bufio|imported and not used"

	pattern net...
	match net netchan net/http
	not not/http not/net/http

	pattern net/...
	match net net/http
	not not/http netchan

	pattern abc.../def
	match abcxyz
	not xyzabc

	pattern x/y/z/...
	match x x/y x/y/z x/y/z/w

	pattern x/y/z
	match x x/y x/y/z
	not x/y/z/w

	pattern x/.../y/z
	match x/a/b/c
	not y/x/a/b/c
`

      - suffix: -ns-suffix
      - presence: {}
      notNamespaces:
      - exact: not-ns
      - prefix: not-ns-prefix-
      - suffix: -not-ns-suffix
      - presence: {}
- rules:
  - matches:
    - notPrincipals:
      - exact: not-principal
      - prefix: not-principal-prefix-
      - suffix: -not-suffix-principal
      - presence: {}
      principals:
      - exact: principal

                      stringMatch:
                        exact: not-method
                  - header:
                      name: :method
                      stringMatch:
                        prefix: not-method-prefix-
                  - header:
                      name: :method
                      stringMatch:
                        suffix: -not-suffix-method
                  - header:

        notPrincipals: ["not-principal"]
        notRequestPrincipals: ["not-requestPrincipals"]
        notNamespaces: ["not-ns"]
        notIpBlocks: ["9.0.0.1"]
        notRemoteIpBlocks: ["10.133.154.65"]
    to:
    - operation:
        methods: ["method"]
        hosts: ["exact.com"]
        ports: ["80"]
        paths: ["/exact"]
        notMethods: ["not-method"]
        notHosts: ["not-exact.com"]

-- input --
The Go home page is https://go.dev/.
It used to be https://golang.org.
https:// is not a link.
Nor is https://
https://☺ is not a link.
https://:80 is not a link.

-- gofmt --
The Go home page is https://go.dev/.
It used to be https://golang.org.
https:// is not a link.
Nor is https://
https://☺ is not a link.
https://:80 is not a link.

-- text --

			usages: kubeletServerUsagesNoRSA,
			exp:    true,
		},
		"does not default to kube-apiserver-client-kubelet if org is not 'system:nodes'": {
			req:    newCSR(kubeletServerPEMOptions, pemOptions{org: "not-system:nodes"}),
			usages: kubeletServerUsages,
			exp:    false,
		},
		"does not default to kubelet-serving if CN does not have system:node: prefix": {

	_ = c == nil

	_ = nil /* ERROR "operator < not defined on untyped nil" */ < nil
	_ = b < b
	_ = a /* ERROR "operator < not defined on array" */ < a
	_ = l /* ERROR "operator < not defined on slice" */ < l
	_ = s /* ERROR "operator < not defined on struct" */ < s
	_ = p /* ERROR "operator < not defined on pointer" */ < p
	_ = f /* ERROR "operator < not defined on func" */ < f
	_ = i /* ERROR "operator < not defined on interface" */ < i

Method <org.gradle.api.plugins.antlr.AntlrTask.getSource()> does not have raw return type assignable to org.gradle.api.file.ConfigurableFileCollection in (AntlrTask.java:0)