// TestExcludedResources is an open-box test to ensure that a resource that is not persisted // is either in the allow-list or block-list of the CEL admission. // // see staging/src/k8s.io/apiserver/pkg/admission/exclusion/exclusion.go // for the lists that the test is about. func TestExcludedResources(t *testing.T) { … } func formatGRs(grs []schema.GroupResource) string { … }