• Kubernetes Submit Queue's avatar
    Merge pull request #60236 from immutableT/kms-mock · efdc6802
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 60236, 60332, 57375, 60451, 57408). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Adding Data Encryption Key (DEK) Key Encryption Key (KEK) integration…
    
    … tests via KMS Plugin Mock.
    
    
    
    **What this PR does / why we need it**:
    Adding integration tests between KubeAPI and KMS Plugin.
    Concretely, this test verifies the following integration contracts:
    1. Raw records in ETCD that were processed by KMS Provider should be prefixed with k8s:enc:kms:v1:grpc-kms-provider-name:
    2. Data Encryption Key (DEK) should be generated by envelopeTransformer and passed to KMS gRPC Plugin
    3. KMS gRPC Plugin should encrypt the DEK with a Key Encryption Key (KEK) and pass it back to envelopeTransformer
    4. The payload (ex. Secret) should be encrypted via AES CBC transform
    5. Prefix-EncryptedDEK-EncryptedPayload structure should be deposited to ETCD
    
    **Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
    Fixes #
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    NONE
    ```
    efdc6802
Name
Last commit
Last update
..
conformance Loading commit data...
e2e Loading commit data...
e2e_node Loading commit data...
fixtures Loading commit data...
images Loading commit data...
integration Loading commit data...
kubemark Loading commit data...
list Loading commit data...
soak Loading commit data...
typecheck Loading commit data...
utils Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
test_owners.csv Loading commit data...
test_owners.json Loading commit data...