mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2025-06-13 02:33:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

util: move existing KMS implementations to the DEKStore interface

Browse Source 
Use DEKStore API for Fetching and Storing passphrases.

Drop the fallback for the old KMS interface that is now provided as
DEKStore. The original implementation has been re-used for the DEKStore
interface.

This also moves GetCryptoPassphrase/StoreNewCryptoPassphrase functions
to methods of VolumeEncryption.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos
2021-02-15 10:24:47 +01:00
committed by mergify[bot]
parent b60dd286c6
commit 9ac7f56400
7 changed files with 50 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
internal/util/crypto_test.go
View File

@ -60,12 +60,16 @@ func TestKMSWorkflow(t *testing.T) {
require.NotNil(t, kms)
assert.Equal(t, defaultKMSType, kms.GetID())
ve, err := NewVolumeEncryption(kms)
assert.NoError(t, err)
require.NotNil(t, ve)
volumeID := "volume-id"
err = StoreNewCryptoPassphrase(volumeID, kms)
err = ve.StoreNewCryptoPassphrase(volumeID)
assert.NoError(t, err)
passphrase, err := GetCryptoPassphrase(volumeID, kms)
passphrase, err := ve.GetCryptoPassphrase(volumeID)
assert.NoError(t, err)
assert.Equal(t, secrets[encryptionPassphraseKey], passphrase)
}