if re.Min == 0 {
				return simplify1(OpStar, re.Flags, sub, nil)
			}

			// Special case: x{1,} is x+.
			if re.Min == 1 {
				return simplify1(OpPlus, re.Flags, sub, nil)
			}

			// General case: x{4,} is xxxx+.
			nre := &Regexp{Op: OpConcat}
			nre.Sub = nre.Sub0[:0]
			for i := 0; i < re.Min-1; i++ {
				nre.Sub = append(nre.Sub, sub)
			}
			nre.Sub = append(nre.Sub, simplify1(OpPlus, re.Flags, sub, nil))
			return nre

\226\240=\223;\246\267\313TH\276+\346\245\270\tK\204\275\260S\"\276\331_\0337\226uD\276\337\037\014>-\375d\274\306\317-?\307Q\343\2679w\265\266\234@\326\266^QA>\211\332V>\257cL>\245<\217\272\242\216$\276\376\3077=R\340\023\276)\203\314>;-\346\276\014xx\271\353u\224\275\222\254\342\270\376\021\243\275\034}\221\270nK7>[\227&>\'\016.\2704CO=\210P\232=\304\252\341\263x^=\275\227\322h\267\270\323o\275EF\304=\031L\327\266\226\301@>\351Wy\276@\004\032;^\223\243=\237I\277\267\023c\2468U\007K7\021\n+<\35...

if [[ ${VERBOSE_OUTPUT} =~ ^[yY]$ ]]; then
  set -x
fi

pushd "${KUBE_ROOT}" > /dev/null

# Setup a tmpdir to hold generated scripts and results
tmpdir=$(mktemp -d -t verify-e2e-test-ownership.XXXX)
readonly tmpdir
trap 'rm -rf ${tmpdir}' EXIT

# input
spec_summaries="${KUBE_ROOT}/_output/specsummaries.json"
# output
results_json="${tmpdir}/results.json"
summary_json="${tmpdir}/summary.json"

}

// serviceExternalChainName returns the name of the KUBE-EXT-XXXX chain for a service, which
// implements "short-circuiting" for internally-originated external-destination traffic when using
// `Local` external traffic policy.  It forwards traffic from local sources to the KUBE-SVC-XXXX
// chain and traffic from external sources to the KUBE-SVL-XXXX chain.

          ALMOST_TOO_LONG + ".c");

  private static final ImmutableSet<String> RS =
      ImmutableSet.of(
          "com",
          "co.uk",
          "foo.bd",
          "xxxxxx.bd",
          "org.mK",
          "us",
          "co.uk.", // Trailing dot
          "co\uFF61uk", // Alternate dot character
          "\u7f51\u7edc.Cn", // "网络.Cn"

\226\240=\223;\246\267\313TH\276+\346\245\270\tK\204\275\260S\"\276\331_\0337\226uD\276\337\037\014>-\375d\274\306\317-?\307Q\343\2679w\265\266\234@\326\266^QA>\211\332V>\257cL>\245<\217\272\242\216$\276\376\3077=R\340\023\276)\203\314>;-\346\276\014xx\271\353u\224\275\222\254\342\270\376\021\243\275\034}\221\270nK7>[\227&>\'\016.\2704CO=\210P\232=\304\252\341\263x^=\275\227\322h\267\270\323o\275EF\304=\031L\327\266\226\301@>\351Wy\276@\004\032;^\223\243=\237I\277\267\023c\2468U\007K7\021\n+<\35...

  istioctl ztunnel-config workload

  # Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
  istioctl ztunnel-config workload <ztunnel-name[.namespace]> --node ambient-worker

  # Retrieve full workload dump of workloads with address XXXX for a given Ztunnel instance.
  istioctl ztunnel-config workload <ztunnel-name[.namespace]> --address 0.0.0.0 -o json

\226\240=\223;\246\267\313TH\276+\346\245\270\tK\204\275\260S\"\276\331_\0337\226uD\276\337\037\014>-\375d\274\306\317-?\307Q\343\2679w\265\266\234@\326\266^QA>\211\332V>\257cL>\245<\217\272\242\216$\276\376\3077=R\340\023\276)\203\314>;-\346\276\014xx\271\353u\224\275\222\254\342\270\376\021\243\275\034}\221\270nK7>[\227&>\'\016.\2704CO=\210P\232=\304\252\341\263x^=\275\227\322h\267\270\323o\275EF\304=\031L\327\266\226\301@>\351Wy\276@\004\032;^\223\243=\237I\277\267\023c\2468U\007K7\021\n+<\35...

//     kmskey: "key-id" # match objects with KMS key-id (applicable only for sse-kms)
//   notify:
//     endpoint: "https://notify.endpoint" # notification endpoint to receive job status events
//     token: "Bearer xxxxx" # optional authentication token for the notification endpoint

//   retry:
//     attempts: 10 # number of retries for the job before giving up
//     delay: "500ms" # least amount of delay between each retry

1048580:/quota1/b
1048581:/quota2/b
`
	projects4 = `1048577:/quota1/a
1048581:/quota2/b
`
	projects5 = `1048581:/quota2/b
`

	projidHeader = `# This is a /etc/projid header
xxxxxx:1048579
`
	projid1 = `volume1048577:1048577
`
	projid2 = `volume1048577:1048577
volume1048580:1048580
`
	projid3 = `volume1048577:1048577
volume1048580:1048580
volume1048581:1048581
`