}
}

func Test_kmsv2PluginProbe_rotateDEKOnKeyIDChange(t *testing.T) {
	defaultUseSeed := GetKDF()

	origNowFunc := envelopekmsv2.NowFunc
	now := origNowFunc() // freeze time
	t.Cleanup(func() { envelopekmsv2.NowFunc = origNowFunc })
	envelopekmsv2.NowFunc = func() time.Time { return now }

	klog.LogToStderr(false)
	var level klog.Level
	if err := level.Set("6"); err != nil {
		t.Fatal(err)
	}

		{"NewAlias", Func, 22},
		{"NewArray", Func, 5},
		{"NewChan", Func, 5},
		{"NewChecker", Func, 5},
		{"NewConst", Func, 5},
		{"NewContext", Func, 18},
		{"NewField", Func, 5},
		{"NewFunc", Func, 5},
		{"NewInterface", Func, 5},
		{"NewInterfaceType", Func, 11},
		{"NewLabel", Func, 5},
		{"NewMap", Func, 5},
		{"NewMethodSet", Func, 5},
		{"NewNamed", Func, 5},
		{"NewPackage", Func, 5},

}

func TestCreateWithNowFuncOverride(t *testing.T) {
	user := User{Name: "CreateUserTimestampOverride"}
	curTime := now.MustParse("2016-01-01")

	NEW := DB.Session(&gorm.Session{
		NowFunc: func() time.Time {
			return curTime
		},
	})

	NEW.Save(&user)

	AssertEqual(t, user.CreatedAt, curTime)
	AssertEqual(t, user.UpdatedAt, curTime)

	var newUser User

	// we start the timer before we make the network call because kmsv2PluginWriteDEKSourceMaxTTL is meant to be the upper bound
	expirationTimestamp := envelopekmsv2.NowFunc().Add(kmsv2PluginWriteDEKSourceMaxTTL)

	// dynamically check if we want to use KDF seed to derive DEKs or just a single DEK
	// this gate can only change during tests, but the check is cheap enough to always make