* Returns the newly refreshed value associated with {@code key} if it was refreshed inline, or
     * {@code null} if another thread is performing the refresh or if an error occurs during
     * refresh.
     */
    @CanIgnoreReturnValue
    @Nullable V refresh(K key, int hash, CacheLoader<? super K, V> loader, boolean checkTime) {
      LoadingValueReference<K, V> loadingValueReference =

     * Returns the newly refreshed value associated with {@code key} if it was refreshed inline, or
     * {@code null} if another thread is performing the refresh or if an error occurs during
     * refresh.
     */
    @CanIgnoreReturnValue
    @Nullable V refresh(K key, int hash, CacheLoader<? super K, V> loader, boolean checkTime) {
      LoadingValueReference<K, V> loadingValueReference =

			if err := sys.Load(ctx, false); err != nil {
				iamLogIf(ctx, fmt.Errorf("Failure in periodic refresh for IAM (duration: %s): %v", time.Since(refreshStart), err), logger.WarningKind)
			} else {
				took := time.Since(refreshStart).Seconds()
				if took > maxDurationSecondsForLog {
					// Log if we took a lot of time to load.
					logger.Info("IAM refresh took (duration: %.2fs)", took)
				}
			}

        }
    }

    /**
     * Refreshes the specified indices to make recent changes visible for search.
     *
     * @param indices the indices to refresh
     */
    public void refresh(final String... indices) {
        client.admin().indices().prepareRefresh(indices).execute(new ActionListener<RefreshResponse>() {

#### Garbage Collector
* The garbage collector now supports custom APIs added via Custom Resource Definitions
  or aggregated API servers. The garbage collector controller refreshes periodically.
  Therefore, expect a latency of about 30 seconds between when an API is added and when
  the garbage collector starts to manage it.


#### Monitoring/Prometheus

    assertThat(map.evictsBySize()).isFalse();
    assertThat(map.expires()).isFalse();
    assertThat(map.expiresAfterWrite()).isFalse();
    assertThat(map.expiresAfterAccess()).isFalse();
    assertThat(map.refreshes()).isFalse();
  }

  public void testSetKeyEquivalence() {
    Equivalence<Object> testEquivalence =
        new Equivalence<Object>() {
          @Override

    assertThat(map.evictsBySize()).isFalse();
    assertThat(map.expires()).isFalse();
    assertThat(map.expiresAfterWrite()).isFalse();
    assertThat(map.expiresAfterAccess()).isFalse();
    assertThat(map.refreshes()).isFalse();
  }

  public void testSetKeyEquivalence() {
    Equivalence<Object> testEquivalence =
        new Equivalence<Object>() {
          @Override

  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be...

    ConcurrentMap<String, String> map = cache.asMap();
    map.put(refreshKey, refreshKey);
    assertThat(map).hasSize(1);
    assertThat(map.containsKey(getKey)).isFalse();
    assertThat(map.get(refreshKey)).isSameInstanceAs(refreshKey);

    new Thread() {
      @Override
      public void run() {
        cache.getUnchecked(getKey);

    ConcurrentMap<String, String> map = cache.asMap();
    map.put(refreshKey, refreshKey);
    assertThat(map).hasSize(1);
    assertThat(map.containsKey(getKey)).isFalse();
    assertThat(map.get(refreshKey)).isSameInstanceAs(refreshKey);

    new Thread() {
      @Override
      public void run() {
        cache.getUnchecked(getKey);