client := exClient.Dynamic()
	gvr := schema.GroupVersionResource{
		Group:    "hub.gke.io",
		Version:  "v1",
		Resource: "memberships",
	}
	u, err := client.Resource(gvr).Get(ctx, "membership", metav1.GetOptions{})
	if err != nil {
		return nil, err
	}
	spec, ok := u.Object["spec"].(map[string]any)
	if !ok {
		return nil, errors.New(`field "spec" is not a map`)
	}

		cache.updatedAt = time.Now()
		return nil
	}

	gi := cache.iamGroupsMap[group]

	// Updating the group memberships cache happens in two steps:
	//
	// 1. Remove the group from each user's list of memberships.
	// 2. Add the group to each member's list of memberships.
	//
	// This ensures that regardless of members being added or
	// removed, the cache stays current.

- find accounts (user DNs) that have been removed; any active STS credentials or MinIO service accounts belonging to these users are purged.

- find accounts whose group memberships have changed; access policies available to a credential are updated to reflect the change, i.e. they will lose any privileges associated with a group they are removed from, and gain any privileges associated with a group they are added to.

			gSet := set.CreateStringSet(cred.Groups...)
			if gSet.Equals(currGroupsSet) {
				// No change to groups memberships for this
				// credential.
				continue
			}

			// Expired credentials don't need group membership updates.
			if cred.IsExpired() {
				continue
			}

			cred.Groups = currGroups

pkg syscall (freebsd-riscv64), const IPV6_MAX_MEMBERSHIPS = 4095 #53466
pkg syscall (freebsd-riscv64), const IPV6_MAX_MEMBERSHIPS ideal-int #53466
pkg syscall (freebsd-riscv64), const IPV6_MAX_SOCK_SRC_FILTER = 128 #53466
pkg syscall (freebsd-riscv64), const IPV6_MAX_SOCK_SRC_FILTER ideal-int #53466
pkg syscall (freebsd-riscv64), const IPV6_MIN_MEMBERSHIPS = 31 #53466

pkg syscall (darwin-arm64), const IPV6_MAX_MEMBERSHIPS = 4095
pkg syscall (darwin-arm64), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (darwin-arm64), const IPV6_MAX_SOCK_SRC_FILTER = 128
pkg syscall (darwin-arm64), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (darwin-arm64), const IPV6_MIN_MEMBERSHIPS = 31
pkg syscall (darwin-arm64), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (darwin-arm64), const IPV6_MMTU = 1280

pkg syscall (freebsd-arm64), const INPCK = 16
pkg syscall (freebsd-arm64), const INPCK ideal-int
pkg syscall (freebsd-arm64), const IP_ADD_MEMBERSHIP = 12
pkg syscall (freebsd-arm64), const IP_ADD_SOURCE_MEMBERSHIP = 70
pkg syscall (freebsd-arm64), const IP_ADD_SOURCE_MEMBERSHIP ideal-int
pkg syscall (freebsd-arm64), const IP_BINDANY = 24
pkg syscall (freebsd-arm64), const IP_BINDANY ideal-int

pkg syscall (linux-386-cgo), const IP_DROP_MEMBERSHIP = 36
pkg syscall (linux-386-cgo), const IP_DROP_SOURCE_MEMBERSHIP = 40
pkg syscall (linux-386-cgo), const IP_FREEBIND = 15
pkg syscall (linux-386-cgo), const IP_HDRINCL = 3
pkg syscall (linux-386-cgo), const IP_IPSEC_POLICY = 16
pkg syscall (linux-386-cgo), const IP_MAXPACKET = 65535
pkg syscall (linux-386-cgo), const IP_MAX_MEMBERSHIPS = 20

pkg syscall (darwin-386), const IPV6_MAX_GROUP_SRC_FILTER ideal-int
pkg syscall (darwin-386), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (darwin-386), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (darwin-386), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (darwin-386), const IPV6_MMTU ideal-int
pkg syscall (darwin-386), const IPV6_PORTRANGE ideal-int

pkg syscall (freebsd-386-cgo), const IPV6_MAX_GROUP_SRC_FILTER ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MMTU ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MSFILTER ideal-int