mirror of
https://github.com/ceph/ceph-csi.git
synced 2025-06-13 10:33:35 +00:00
e2e: add e2e for user secret based metadata encryption
This commit adds e2e for user secret based metadata encryption, adds user-secret.yaml and makes required changes in kms-connection-details, kms-config yamls. Signed-off-by: Rakshith R <rar@redhat.com>
This commit is contained in:
@ -35,6 +35,17 @@ data:
|
||||
{
|
||||
"encryptionKMSType": "metadata"
|
||||
}
|
||||
user-ns-secrets-metadata-test: |-
|
||||
{
|
||||
"encryptionKMSType": "metadata",
|
||||
"secretName": "storage-encryption-secret",
|
||||
"secretNamespace": "default"
|
||||
}
|
||||
user-secrets-metadata-test: |-
|
||||
{
|
||||
"encryptionKMSType": "metadata",
|
||||
"secretName": "storage-encryption-secret"
|
||||
}
|
||||
aws-metadata-test: |-
|
||||
{
|
||||
"KMS_PROVIDER": "aws-metadata",
|
||||
|
@ -33,6 +33,15 @@ data:
|
||||
},
|
||||
"secrets-metadata-test": {
|
||||
"encryptionKMSType": "metadata"
|
||||
},
|
||||
"user-ns-secrets-metadata-test": {
|
||||
"encryptionKMSType": "metadata",
|
||||
"secretName": "storage-encryption-secret",
|
||||
"secretNamespace": "default"
|
||||
},
|
||||
"user-secrets-metadata-test": {
|
||||
"encryptionKMSType": "metadata",
|
||||
"secretName": "storage-encryption-secret"
|
||||
}
|
||||
}
|
||||
metadata:
|
||||
|
11
examples/kms/vault/user-secret.yaml
Normal file
11
examples/kms/vault/user-secret.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
# This is the user secret containing encryptionPasspharse that can be
|
||||
# created in a Kubernetes Namespace for encrypting PVCs with the
|
||||
# "user-ns-secrets-metadata-test" or "user-secrets-metadata-test"
|
||||
# encryptionKMSID.
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: storage-encryption-secret
|
||||
stringData:
|
||||
encryptionPassphrase: test-encryption
|
Reference in New Issue
Block a user