description: "Testing of the Elasticsearch %BRANCH% branch windows packaging test support matrix.\n"
    project-type: matrix
    node: master
    scm:
      - git:
          wipe-workspace: false
    axes:
      - axis:
          type: label-expression
          name: os
          values:
            - "windows-2012-r2"
            - "windows-2016"
            - "windows-2019"

        // When
        context.secureWipeKeys();

        // Then - keys should be wiped (we can't directly access them, but method should complete)
        assertDoesNotThrow(() -> context.secureWipeKeys(), "Should handle multiple wipe calls");
    }

    @Test
    @DisplayName("Should detect when key rotation is needed based on bytes encrypted")

    # Use a hard-coded workspace directory to avoid hitting file path limits with auto-generated workspace path
    child-workspace: "C:\\Users\\jenkins\\workspace\\platform-support\\${BUILD_NUMBER}"
    scm:
      - git:
          wipe-workspace: false
    axes:
      - axis:
          type: label-expression
          name: os
          values:
            - "windows-2012-r2"
            - "windows-2016"
            - "windows-2019"

    name: "{job-name}"
    display-name: "{job-display-name}"
    description: "{job-description}"
    project-type: matrix
    child-workspace: /dev/shm/{job-name}
    node: master
    scm:
      - git:
          wipe-workspace: false
    axes:
      - axis:
          type: slave
          name: nodes
          values:
            - "general-purpose"
      - axis:
          type: yaml
          filename: "{matrix-yaml-file}"

          regex-filter-text: '$ref'
          regex-filter-expression: "^refs/heads/%BRANCH%$"
          cause: Push to GitHub (refs/heads/%BRANCH%)
          silent-response: true
    scm:
      - git:
          wipe-workspace: false
    builders:
      - multijob:
          name: Sanity Check
          projects:
            - name: elastic+elasticsearch+%BRANCH%+intake+multijob+sanity-check
              kill-phase-on: NEVER

    description: "Testing of the Elasticsearch %BRANCH% branch packaging tests.\n"
    project-type: multijob
    node: master
    vault: []
    scm:
      - git:
          wipe-workspace: false
    builders:
      - multijob:
          name: Packaging tests
          projects:
            - name: elastic+elasticsearch+%BRANCH%+multijob+packaging-tests-unix
              kill-phase-on: NEVER

    description: "Testing of the Elasticsearch %BRANCH% branch packaging test upgrade support matrix.\n"
    project-type: matrix
    node: master
    scm:
      - git:
          wipe-workspace: false
    axes:
      - axis:
          type: label-expression
          name: os
          values:
            - centos-8-packaging
            - ubuntu-20.04-packaging
      - axis:

            System.arraycopy(ciphertext, 0, result, GCM_IV_SIZE, ciphertext.length);

            return result;

        } finally {
            // Securely wipe plaintext bytes - guaranteed by try-finally
            if (plaintextBytes != null) {
                SecureKeyManager.secureWipe(plaintextBytes);
            }
        }
    }

    description: "Testing of the Elasticsearch %BRANCH% branch unix packaging test support matrix.\n"
    project-type: matrix
    node: master
    scm:
      - git:
          wipe-workspace: false
    axes:
      - axis:
          type: label-expression
          name: os
          values:
            - centos-7-packaging
            - centos-8-packaging
            - debian-9-packaging

    }

    /**
     * Securely wipes the password from memory
     */
    public void secureWipePassword() {
        if (this.password != null) {
            // Multi-pass secure wipe of password char array
            Arrays.fill(this.password, '\0');
            Arrays.fill(this.password, '\uFFFF');