purgeStart := time.Now()

	// Purge expired STS credentials.

	// Scan STS users on disk and purge expired ones.
	stsAccountsFromStore := map[string]UserIdentity{}
	stsAccPoliciesFromStore := xsync.NewMapOf[string, MappedPolicy]()
	for _, item := range listedConfigItems[stsListKey] {
		userName := path.Dir(item)
		// loadUser() will delete expired user during the load.

# Usage: setup.python.sh <pyversion> <requirements.txt>

# Sets up custom apt sources for our TF images.

# Prevent apt install tzinfo from asking our location (assumes UTC)
export DEBIAN_FRONTEND=noninteractive

# Set up shared custom sources
apt-get update
apt-get install -y gnupg ca-certificates

# Deadsnakes: https://launchpad.net/~deadsnakes/+archive/ubuntu/ppa

         "pluginVersion": "v11.0.0",
         "targets": [
            {
               "datasource": {
                  "type": "prometheus",
                  "uid": "$datasource"
               },
               "expr": "sum by (cluster, namespace, job) (\n    rate(\n        process_cpu_seconds_total{\n            cluster=~\"$cluster\",\n            namespace=~\"$namespace\",\n            job=~\"$job\"\n        }\n    [$__rate_interval])\n)\n",

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

if [[ "${ISTIO_ZTUNNEL_BASE_URL}" != "https://storage.googleapis.com/istio-build/ztunnel" ]]; then
  AUTH_HEADER="Authorization: Bearer $(gcloud auth print-access-token)"
  export AUTH_HEADER
fi

ZTUNNEL_REPO_SHA="${ZTUNNEL_REPO_SHA:-$(grep ZTUNNEL_REPO_SHA istio.deps  -A 4 | grep lastStableSHA | cut -f 4 -d '"')}"
ISTIO_ZTUNNEL_VERSION="${ISTIO_ZTUNNEL_VERSION:-${ZTUNNEL_REPO_SHA}}"

* All changes should have an associated GitHub issue and/or a release note.
* Large fixes, where the LOC>100 not withstanding unit tests changes, require subject matter expert approval.

# Backporting fixes

* Cherry-picking is discussed in the original PR and subject-matter experts have approved the backport.

#      compilers, etc. can cause undefined behavior such as build failures
#      or tests passing incorrectly.
#    - Automatic LLVM updates are known to extend build time even with
#      the cache; this is unavoidable.
export TFCI=py311,linux_x86,public_cache,disk_cache

# Recommended: Configure Docker. (Linux only)
#
#   TF uses hub.docker.com/r/tensorflow/build containers for CI,

          },
          "expr": "go_memstats_heap_alloc_bytes{app=\"istiod\"}",
          "format": "time_series",
          "hide": true,
          "intervalFactor": 2,
          "legendFormat": "heap alloc",
          "refId": "D"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${datasource}"
          },