gzipObjects                 bool
	rootAccess                  bool
	syncEvents                  bool
	objectMaxVersions           int64
}

const (
	cgroupV1MemLimitFile = "/sys/fs/cgroup/memory/memory.limit_in_bytes"
	cgroupV2MemLimitFile = "/sys/fs/cgroup/memory.max"
)

func cgroupMemLimit() (limit uint64) {
	buf, err := os.ReadFile(cgroupV2MemLimitFile)
	if err != nil {
		buf, err = os.ReadFile(cgroupV1MemLimitFile)
	}

Go 1.25 added a new `containermaxprocs` setting that controls whether the Go
runtime will consider cgroup CPU limits when setting the default GOMAXPROCS.
The default value `containermaxprocs=1` will use cgroup limits in addition to
the total logical CPU count and CPU affinity. `containermaxprocs=0` will
disable consideration of cgroup limits. This setting only affects Linux.

        * Whether all containers should be non-root
        * Supplemental Groups
        * FSGroup - a special supplemental group
        * SELinux options
     * If a pod defines an FSGroup, that Pod’s system (emptyDir, secret, configMap,
etc) volumes and block-device volumes will be owned by the FSGroup, and each
container in the pod will run with the FSGroup as a supplemental group

        assertNotNull(groupNames);
        assertEquals(2, groupNames.length);
        assertEquals("group1", groupNames[0]);
        assertEquals("group2", groupNames[1]);
    }

    public void test_getGroupNames_empty() {
        // Test when no groups match the prefix
        ComponentUtil.setFessConfig(new FessConfig.SimpleImpl() {
            @Override

	r, err := ies.client.Get(cctx, iamConfigGroupsPrefix, etcd.WithPrefix(), etcd.WithKeysOnly())
	if err != nil {
		return err
	}

	groups := etcdKvsToSet(iamConfigGroupsPrefix, r.Kvs)

	// Reload config for all groups.
	for _, group := range groups.ToSlice() {
		if err = ies.loadGroup(ctx, group, m); err != nil && err != errNoSuchGroup {
			return err
		}
	}
	return nil
}

		}

		bootstrapTraceMsgFirstTime("loading regular IAM groups")
		groupsLoadStartTime := UTCNow()
		groupsList := listedConfigItems[groupsListKey]
		for _, item := range groupsList {
			group := path.Dir(item)
			if err := iamOS.loadGroup(ctx, group, cache.iamGroupsMap); err != nil && err != errNoSuchGroup {
				return fmt.Errorf("unable to load the group: %w", err)
			}
		}

        assertEquals("2group$special", permissionHelper.encode("{group}group$special"));
    }

    public void test_decode_withComplexValues() {
        assertEquals("{user}******@****.***", permissionHelper.decode("******@****.***"));
        assertEquals("{group}group/subgroup", permissionHelper.decode("2group/subgroup"));

        // Test with multiple groups
        String[] groups = { "developers", "testers", "managers" };
        FessUser user = new TestFessUser("testuser", new String[] {}, groups, new String[] {});
        assertArrayEquals(groups, user.getGroupNames());

        // Test with single group
        groups = new String[] { "users" };
        user = new TestFessUser("testuser", new String[] {}, groups, new String[] {});

        // Test with multiple groups
        testUser.setGroupNames(new String[] { "developers", "testers", "managers" });
        groups = fessUserBean.getGroups();
        assertEquals(3, groups.length);
        assertEquals("developers", groups[0]);
        assertEquals("testers", groups[1]);
        assertEquals("managers", groups[2]);
    }

    public void test_isEditable() {
        // Test with non-editable user (default)

## Configuring AD/LDAP on MinIO