- from:
   - source:
       principals: ["cluster.local/ns/default/sa/sleep"]
   - source:
       namespaces: ["test"]
   to:
   - operation:
       methods: ["GET"]
       paths: ["/info*"]
   - operation:
       methods: ["POST"]
       paths: ["/data"]
   when:
   - key: request.auth.claims[iss]

                @Input
                List<String> paths = []

                @OutputDirectory
                File dir = project.file("build/dir")

                @OutputDirectory
                File otherDir = project.file("build/otherDir")

                @TaskAction
                void generate() {
                    paths.each {
                        def f = new File(dir, it)

    - operation: # HTTP
        ports: [ "{{ (.To.PortForName `http`).WorkloadPort }}", "{{ (.To.PortForName `http2`).WorkloadPort }}" ]
        paths: [ "/custom" ]
        methods: [ "GET" ]
  - to:
    - operation: # GRPC
        ports: [ "{{ (.To.PortForName `grpc`).WorkloadPort }}" ]
        paths: [ "/proto.EchoTestService/Echo" ]
        methods: [ "POST" ]
  - to:
    - operation: # TCP

    - to:
        - operation:
            paths: ["/httpbin1"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin-2
  namespace: foo
spec:
  action: CUSTOM
  provider:
    name: another
  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
    - to:
        - operation:

spec:
  rules:
    - host: foohost.bar.com
      http:
        paths:
          - backend:
              service:
                name: service1
                port:
                  number: 4200
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: foo2
  namespace: ns
spec:
  rules:
    - host: foohost.bar.com
      http:
        paths:
          - path: /second
            backend:

}

func initTools(b *binrep, config string) {
	// paths collect paths per tool; Key "" contains the default.
	paths := make(map[string][]string)
	for _, t := range strings.Split(config, ",") {
		name, path := "", t
		if ct := strings.SplitN(t, ":", 2); len(ct) == 2 {
			name, path = ct[0], ct[1]
		}
		paths[name] = append(paths[name], path)
	}

	defaultPath := paths[""]

		openapi := t.fetchOpenAPIOrDie()
		if _, ok := openapi.Paths.Paths[path]; !ok {
			return false, nil
		}
		return true, nil
	})
}

func (t *testEnv) pollForPathNotExists(path string) {
	wait.Poll(time.Second*1, wait.ForeverTestTimeout, func() (bool, error) {
		openapi := t.fetchOpenAPIOrDie()
		if _, ok := openapi.Paths.Paths[path]; ok {
			return false, nil
		}
		return true, nil
	})
}

@HasInternalProtocol
public interface TaskLocalState {
    /**
     * Registers files and directories as local state of this task.
     *
     * @param paths The files that represent the local state. The given paths are evaluated as per {@link org.gradle.api.Project#files(Object...)}.
     */
    void register(Object... paths);

    - to:
        - operation:
            paths: ["/allow"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin-2
  namespace: foo
  annotations:
    "istio.io/dry-run": "true"
spec:
  selector:
    matchLabels:
      app: httpbin
      version: v1
  action: DENY
  rules:
    - to:
        - operation:

    - to:
        - operation:
            paths: ["/httpbin1"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin-2
  namespace: foo
spec:
  action: CUSTOM
  provider:
    name: default
  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
    - to:
        - operation: