@Override
    public void validate(Context context) {
        if (!context.deployState().isHosted() || context.deployState().zone().system().isPublic()) return;
        if (context.deployState().getProperties().allowDisableMtls()) return;
        context.model().getContainerClusters().forEach((id, cluster) -> {
            Http http = cluster.getHttp();
            if (http != null) {
                if (http.getAccessControl().isPresent()) {
                    verifyNoExclusions(id, http.getAccessControl().get(), context);
                }
            }
        });
    }
@Test
    public void validator_accepts_when_allowed_to_exclude() throws IOException, SAXException {
        DeployState deployState = createDeployState(zone(CloudName.AWS, SystemName.main), new StringBuffer(), true);
        VespaModel model = new VespaModel(
                MapConfigModelRegistry.createFromList(new ModelBuilderAddingAccessControlFilter()),
                deployState);
        ValidationTester.validate(new AccessControlFilterExcludeValidator(), model, deployState);
    }