code: func (s *mustRunAs) Validate(fldPath *field.Path, _ *api.Pod, groups []int64) field.ErrorList {
  	allErrs := field.ErrorList{}
  
  	if len(groups) == 0 && len(s.ranges) > 0 {
  		allErrs = append(allErrs, field.Invalid(fldPath, groups, "unable to validate empty groups against required ranges"))
  	}
  
  	allErrs = append(allErrs, ValidateGroupsInRanges(fldPath, s.ranges, groups)...)
  
  	return allErrs
  }
docs: // Validate ensures that the specified values fall within the range of the strategy.
  // Groups are passed in here to allow this strategy to support multiple group fields (fsgroup and
  // supplemental groups).