e2e: add e2e for user secret based metadata encryption

This commit adds e2e for user secret based metadata encryption,
adds user-secret.yaml and makes required changes in kms-connection-details,
kms-config yamls.

Signed-off-by: Rakshith R <rar@redhat.com>
This commit is contained in:
Rakshith R
2021-07-05 13:58:33 +05:30
committed by mergify[bot]
parent 3352d4aabd
commit b27d6319ca
4 changed files with 133 additions and 0 deletions

View File

@ -35,6 +35,17 @@ data:
{
"encryptionKMSType": "metadata"
}
user-ns-secrets-metadata-test: |-
{
"encryptionKMSType": "metadata",
"secretName": "storage-encryption-secret",
"secretNamespace": "default"
}
user-secrets-metadata-test: |-
{
"encryptionKMSType": "metadata",
"secretName": "storage-encryption-secret"
}
aws-metadata-test: |-
{
"KMS_PROVIDER": "aws-metadata",

View File

@ -33,6 +33,15 @@ data:
},
"secrets-metadata-test": {
"encryptionKMSType": "metadata"
},
"user-ns-secrets-metadata-test": {
"encryptionKMSType": "metadata",
"secretName": "storage-encryption-secret",
"secretNamespace": "default"
},
"user-secrets-metadata-test": {
"encryptionKMSType": "metadata",
"secretName": "storage-encryption-secret"
}
}
metadata:

View File

@ -0,0 +1,11 @@
---
# This is the user secret containing encryptionPasspharse that can be
# created in a Kubernetes Namespace for encrypting PVCs with the
# "user-ns-secrets-metadata-test" or "user-secrets-metadata-test"
# encryptionKMSID.
apiVersion: v1
kind: Secret
metadata:
name: storage-encryption-secret
stringData:
encryptionPassphrase: test-encryption