ctx := testContext(t)
	invalidKeyIDService, _ := newMockInvalidKeyIDEnvelopeKMSv2Service(ctx, "unix:///tmp/testprovider.sock", 3*time.Second, "")
	invalidLongKeyIDService, _ := newMockInvalidKeyIDEnvelopeKMSv2Service(ctx, "unix:///tmp/testprovider.sock", 3*time.Second, sampleInvalidKeyID)
	service, _ := newMockInvalidKeyIDEnvelopeKMSv2Service(ctx, "unix:///tmp/testprovider.sock", 3*time.Second, "1")

	testCases := []struct {
		desc    string

resources:
  - resources:
      - secrets
    providers:
      - kms:
          name: kms-provider-1
          cachesize: 1000
          endpoint: unix:///@provider1.sock
      - kms:
          name: kms-provider-2
          cachesize: 1000

            - name: key2
              secret: dGhpcyBpcyBwYXNzd29yZA==
      - kms:
          name: testprovider
          endpoint: unix:///tmp/testprovider.sock
          cachesize: 10
          timeout: 10s
      - kms:
          apiVersion: v2
          name: testproviderv2
          endpoint: unix:///tmp/testprovider.sock
      - aescbc:
          keys:
            - name: key1
              secret: c2VjcmV0IGlzIHNlY3VyZQ==

resources:
  - resources:
      - secrets
    providers:
      - kms:
          apiVersion: v2
          name: testproviderv2
          endpoint: unix:///tmp/testprovider.sock
          timeout: 15s
      - kms:
          name: testprovider
          endpoint: unix:///tmp/testprovider.sock
          cachesize: 10
      - secretbox:
          keys:
            - name: key1

            - name: key2
              secret: dGhpcyBpcyBwYXNzd29yZA==
      - kms:
          name: testprovider
          endpoint: unix:///tmp/testprovider.sock
          cachesize: 10
      - kms:
          apiVersion: v2
          name: testproviderv2
          endpoint: unix:///tmp/testprovider.sock
          timeout: 1s
      - identity: {}
      - aesgcm:
          keys:
            - name: key1

// for the filesystem that path resides upon.
func Info(path string) (int64, int64, int64, int64, int64, int64, error) {
	statfs := &unix.Statfs_t{}
	err := unix.Statfs(path, statfs)
	if err != nil {
		return 0, 0, 0, 0, 0, 0, err
	}

	// Available is blocks available * fragment size
	available := int64(statfs.Bavail) * int64(statfs.Bsize)

// Copyright 2022 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

//go:build unix && !darwin && !dragonfly && !freebsd && !linux && !openbsd && !netbsd

package unix

import "syscall"

func Eaccess(path string, mode uint32) error {
	return syscall.ENOSYS

resources:
  - resources:
      - secrets
    providers:
      - kms:
          apiVersion: v2
          name: foo
          endpoint: unix:///tmp/testprovider.sock
          timeout:   15s
      - kms:
          name: bar
          endpoint: unix:///tmp/testprovider.sock

resources:
  - resources:
      - secrets
    providers:
      - kms:
          apiVersion: v2
          name: foo
          endpoint: unix:///tmp/testprovider.sock
          timeout:   15s
      - kms:
          apiVersion: v2
          name: bar
          endpoint: unix:///tmp/testprovider.sock

// Copyright 2023 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

//go:build unix

package runtime

const (
	// These values are the same on all known Unix systems.
	// If we find a discrepancy some day, we can split them out.
	_F_SETFD    = 2
	_FD_CLOEXEC = 1
)

//go:nosplit
func closeonexec(fd int32) {
	fcntl(fd, _F_SETFD, _FD_CLOEXEC)