From 2165ca6aaf9aa9690fec8a8ecfb1272187d3aa4a Mon Sep 17 00:00:00 2001 From: Alexander Dejanovski Date: Wed, 20 Sep 2023 08:40:27 +0200 Subject: [PATCH] reintroduce the 2k client certs for Stargate tests --- test/e2e/medusa_test.go | 4 ++-- test/e2e/reaper_test.go | 8 ++++---- test/e2e/suite_test.go | 8 ++++---- test/framework/e2e_framework.go | 6 +++--- .../client-certificates-secret.yaml | 9 +++++++++ .../client-encryption-secret.yaml | 10 ++++++++++ .../server-encryption-secret.yaml | 12 ++++++++++++ .../multi-dc-encryption-stargate/k8ssandra.yaml | 4 ++-- .../single-dc-encryption-stargate/k8ssandra.yaml | 4 ++-- 9 files changed, 48 insertions(+), 17 deletions(-) create mode 100644 test/testdata/fixtures/client-encryption-stargate/client-certificates-secret.yaml create mode 100644 test/testdata/fixtures/client-encryption-stargate/client-encryption-secret.yaml create mode 100644 test/testdata/fixtures/client-encryption-stargate/server-encryption-secret.yaml diff --git a/test/e2e/medusa_test.go b/test/e2e/medusa_test.go index 6a31097e4..90875212b 100644 --- a/test/e2e/medusa_test.go +++ b/test/e2e/medusa_test.go @@ -26,7 +26,7 @@ const ( func createSingleMedusaJob(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") kcKey := framework.ClusterKey{K8sContext: "kind-k8ssandra-0", NamespacedName: types.NamespacedName{Namespace: namespace, Name: clusterName}} kc := &api.K8ssandraCluster{} err := f.Get(ctx, kcKey, kc) @@ -54,7 +54,7 @@ func createSingleMedusaJob(t *testing.T, ctx context.Context, namespace string, func createMultiMedusaJob(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") kcKey := framework.ClusterKey{K8sContext: "kind-k8ssandra-0", NamespacedName: types.NamespacedName{Namespace: namespace, Name: clusterName}} kc := &api.K8ssandraCluster{} err := f.Get(ctx, kcKey, kc) diff --git a/test/e2e/reaper_test.go b/test/e2e/reaper_test.go index ae44d91fe..e790819c4 100644 --- a/test/e2e/reaper_test.go +++ b/test/e2e/reaper_test.go @@ -24,7 +24,7 @@ import ( func createSingleReaper(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") kcKey := types.NamespacedName{Namespace: namespace, Name: "test"} kc := &api.K8ssandraCluster{} @@ -87,7 +87,7 @@ func createSingleReaper(t *testing.T, ctx context.Context, namespace string, f * func createSingleReaperWithEncryption(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") kcKey := types.NamespacedName{Namespace: namespace, Name: "test"} dcKey := framework.ClusterKey{K8sContext: f.DataPlaneContexts[0], NamespacedName: types.NamespacedName{Namespace: namespace, Name: "dc1"}} @@ -114,7 +114,7 @@ func createSingleReaperWithEncryption(t *testing.T, ctx context.Context, namespa func createMultiReaper(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") uiSecretKey := types.NamespacedName{Namespace: namespace, Name: "reaper-ui-secret"} kcKey := types.NamespacedName{Namespace: namespace, Name: "test"} @@ -201,7 +201,7 @@ func createMultiReaper(t *testing.T, ctx context.Context, namespace string, f *f func createMultiReaperWithEncryption(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") uiSecretKey := types.NamespacedName{Namespace: namespace, Name: "reaper-ui-secret"} kcKey := types.NamespacedName{Namespace: namespace, Name: "test"} diff --git a/test/e2e/suite_test.go b/test/e2e/suite_test.go index 1e705c537..d4f36b6a5 100644 --- a/test/e2e/suite_test.go +++ b/test/e2e/suite_test.go @@ -969,7 +969,7 @@ func createSingleDatacenterClusterWithUpgrade(t *testing.T, ctx context.Context, // and one Stargate node that are deployed in the local cluster. func createSingleDatacenterClusterWithEncryption(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, "client-encryption-stargate/"), "Failed to create the encryption secrets") t.Log("check that the K8ssandraCluster was created") k8ssandra := &api.K8ssandraCluster{} @@ -1006,7 +1006,7 @@ func createSingleDatacenterClusterWithEncryption(t *testing.T, ctx context.Conte // and one Reaper instance that are deployed in the local cluster with encryption on. func createSingleDatacenterClusterReaperEncryption(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, ""), "Failed to create the encryption secrets") t.Log("check that the K8ssandraCluster was created") k8ssandra := &api.K8ssandraCluster{} @@ -1562,7 +1562,7 @@ func removeLocalDcFromCluster(t *testing.T, ctx context.Context, namespace strin func checkStargateApisWithMultiDcCluster(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, "client-encryption-stargate/"), "Failed to create the encryption secrets") t.Log("check that the K8ssandraCluster was created") k8ssandra := &api.K8ssandraCluster{} @@ -1679,7 +1679,7 @@ func checkStargateApisWithMultiDcCluster(t *testing.T, ctx context.Context, name func checkStargateApisWithMultiDcEncryptedCluster(t *testing.T, ctx context.Context, namespace string, f *framework.E2eFramework) { require := require.New(t) - require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace), "Failed to create the encryption secrets") + require.NoError(f.CreateCassandraEncryptionStoresSecret(namespace, "client-encryption-stargate/"), "Failed to create the encryption secrets") t.Log("check that the K8ssandraCluster was created") k8ssandra := &api.K8ssandraCluster{} diff --git a/test/framework/e2e_framework.go b/test/framework/e2e_framework.go index cd0310d7c..45c28e1dc 100644 --- a/test/framework/e2e_framework.go +++ b/test/framework/e2e_framework.go @@ -322,9 +322,9 @@ func (f *E2eFramework) DeployCassandraConfigMap(namespace string) error { return nil } -func (f *E2eFramework) CreateCassandraEncryptionStoresSecret(namespace string) error { +func (f *E2eFramework) CreateCassandraEncryptionStoresSecret(namespace string, filePath string) error { for _, storeType := range []encryption.StoreType{encryption.StoreTypeServer, encryption.StoreTypeClient} { - path := filepath.Join("..", "testdata", "fixtures", fmt.Sprintf("%s-encryption-secret.yaml", storeType)) + path := filepath.Join("..", "testdata", "fixtures", fmt.Sprintf("%s%s-encryption-secret.yaml", filePath, storeType)) for _, k8sContext := range f.DataPlaneContexts { options := kubectl.Options{Namespace: namespace, Context: k8sContext} @@ -336,7 +336,7 @@ func (f *E2eFramework) CreateCassandraEncryptionStoresSecret(namespace string) e } // Create client certificates secret - path := filepath.Join("..", "testdata", "fixtures", "client-certificates-secret.yaml") + path := filepath.Join("..", "testdata", "fixtures", fmt.Sprintf("%sclient-certificates-secret.yaml", filePath)) for _, k8sContext := range f.DataPlaneContexts { options := kubectl.Options{Namespace: namespace, Context: k8sContext} diff --git a/test/testdata/fixtures/client-encryption-stargate/client-certificates-secret.yaml b/test/testdata/fixtures/client-encryption-stargate/client-certificates-secret.yaml new file mode 100644 index 000000000..7895b1b72 --- /dev/null +++ b/test/testdata/fixtures/client-encryption-stargate/client-certificates-secret.yaml @@ -0,0 +1,9 @@ +apiVersion: v1 +data: + client.crt_signed: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUVkVENDQXQwQ0ZCeDJGdnNCYzlVbk00MFlFUjdTTkhFcXluRzFNQTBHQ1NxR1NJYjNEUUVCQ3dVQU1JR2oKTVFzd0NRWURWUVFHRXdKR1VqRU1NQW9HQTFVRUNBd0RTVVJHTVE0d0RBWURWUVFIREFWUVlYSnBjekVSTUE4RwpBMVVFQ2d3SVJHRjBZVk4wWVhneEZ6QVZCZ05WQkFzTURsTlRURlJsYzNSRGJIVnpkR1Z5TVIwd0d3WURWUVFECkRCUlRVMHhVWlhOMFEyeDFjM1JsY2xKdmIzUkRRVEVyTUNrR0NTcUdTSWIzRFFFSkFSWWNZV3hsZUM1a1pXcGgKYm05MmMydHBRR1JoZEdGemRHRjRMbU52YlRBZUZ3MHlNekE1TVRreE9UUXhNamxhRncwek16QTVNVFl4T1RReApNamxhTUVveEN6QUpCZ05WQkFZVEFrWlNNUkV3RHdZRFZRUUtEQWhFWVhSaFUzUmhlREVYTUJVR0ExVUVDd3dPClUxTk1WR1Z6ZEVOc2RYTjBaWEl4RHpBTkJnTlZCQU1NQm1Oc2FXVnVkRENDQWFJd0RRWUpLb1pJaHZjTkFRRUIKQlFBRGdnR1BBRENDQVlvQ2dnR0JMQ2FPVjlqMWNpN0llSXR5WWRiVk0yQk1DQ0FSc01WZ0RtL0EwQllRaThjTQo5VlVNMlNXSDdnT0JaS1BHMUlGQStYWlFNSThIVEE0eG1TdGt3bXpRcjVYNmZSeVJiSVNlQmkrdnRFaENoWkVGCmprSno0WXV2NzArR2VjYkw0ZklaekYxdnJSS0ttbVVmYXZUaWJMOFpsV2tVUk1vcjhOVC9xZFp2M2RsWDhIWTUKZE1aKzVxZDh0S0dXWHh6VWtBWk5kTFcrUVdvc3VGRHc5aWswVlVZWnZPUGVITlFYdDFCSndlMTZSczJBY3VWSApid3lvbkgzUlYrY3VudHpKTk1tQTZxdS8zWGxnQnFYVHc4RHNtRVdHM2hmS3YwVUxMR2RRdjVKYkswa1RLSzBjCndoVnZUUTVMTXZkK2o2THh6enBYKzRLcFJtcGFnRzRyTTJJV1JNeTJ6aDVSUWF4dlBjRHpqUExRZ1RkZGpLY2gKaEF4QjVYeEFjdVd5QXN3ZldsRGdienQ4WjNDdHhYMmoreEc1NStZbGIrWVZkU0kwVDlRL2pBSjBwRW05MVVjeQp5c2hyMHladzRtREFrWHZ1cEw5VHJOWTQyQ2hDMDFkQnU5UU1NRkF2MVYwZmVMZXZOZERQM2xVQmlmbHZJVCtuClViOU02dHlkSjlodS9jVUxYcS9sdXdJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJnUUI3aDJUeFBuanUKOG84RlQ4UWhmbkptZ0NwVTRtbGNOS1RCWDlWT1RWZ1F3Z3lFVEhacVVRN3FkcHNZencwMXU5cjFrWWI4UkdqYQprYTZJZnlWM2FhRy9ZMG9VMEVzU2ZDWTA4RmNUcjFuaFozYThkK1hSM0I5YmdEZmxIQ1hkY1I5SVI5Ulg1TmpKCit2ajlxNC9TcnJLVEJKS0V2YzVqK3lQU1YrcEY2eHZjMGdpUnNSanUxank3eGRZSlVQZjJkWnBndGN2ZCs5Z2sKQ2pEbGlUSWlhMDlFajZtY2JwWHFvTDlLamNMNU9oc3BhWHFlWERQemNDWUJBencyR0NZMHNtMGw3aUd5MzV2cQo3N2Nmb09TUjlmbCtHNXh4eFVDSDdaVUR4ZDN4NWU5Y0RhYTNXUHB5cVlPTjN5WmIxNGZrNWZ2VHpGNVRzRjFzCjBlUE80K2VmdWNHNlZIbDZweXREVCt6a2cyU2hxcGNveFJEdkdCYjBjUjNCN3gwWG1RZVpFUlBqaytDd2phWjAKTCtiZmNFbkJxS2VjOHlDQ2h5T0dUd1MvbGtrMUpNNWZiRVJrdHRDUVJ5cy9EWG1ROXlrSlFtQkVpMmtCNktaSgozR1ZiZXZCM1B3ZkdZK0tYMXF5UGhPNjNSRjBvc3dON3hPcFlURXpZa1VucmgrR3dmMG1LWkQ4PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + client.key: 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 + rootca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUV6ekNDQXpjQ0ZCb201N2dnU0t0aE03d2M1RVpUdENiRERWaW9NQTBHQ1NxR1NJYjNEUUVCQ3dVQU1JR2oKTVFzd0NRWURWUVFHRXdKR1VqRU1NQW9HQTFVRUNBd0RTVVJHTVE0d0RBWURWUVFIREFWUVlYSnBjekVSTUE4RwpBMVVFQ2d3SVJHRjBZVk4wWVhneEZ6QVZCZ05WQkFzTURsTlRURlJsYzNSRGJIVnpkR1Z5TVIwd0d3WURWUVFECkRCUlRVMHhVWlhOMFEyeDFjM1JsY2xKdmIzUkRRVEVyTUNrR0NTcUdTSWIzRFFFSkFSWWNZV3hsZUM1a1pXcGgKYm05MmMydHBRR1JoZEdGemRHRjRMbU52YlRBZUZ3MHlNekE1TVRreE9UTTVNVFphRncwek16QTVNVFl4T1RNNQpNVFphTUlHak1Rc3dDUVlEVlFRR0V3SkdVakVNTUFvR0ExVUVDQXdEU1VSR01RNHdEQVlEVlFRSERBVlFZWEpwCmN6RVJNQThHQTFVRUNnd0lSR0YwWVZOMFlYZ3hGekFWQmdOVkJBc01EbE5UVEZSbGMzUkRiSFZ6ZEdWeU1SMHcKR3dZRFZRUUREQlJUVTB4VVpYTjBRMngxYzNSbGNsSnZiM1JEUVRFck1Da0dDU3FHU0liM0RRRUpBUlljWVd4bAplQzVrWldwaGJtOTJjMnRwUUdSaGRHRnpkR0Y0TG1OdmJUQ0NBYUl3RFFZSktvWklodmNOQVFFQkJRQURnZ0dQCkFEQ0NBWW9DZ2dHQkFPU2dyRUJneXpUNi9UK3psSWFXWWROQk9tOW13ckFpSDZyWXozRkhTMzM3Wlg2THhvMGUKQ3c5M01hMmxJVUJKck9mTVovRmhZSExBU0ZkVXRVKy9SUXdDNW81eUZKT05IU3dXWmZQODRLL0hlQklnb2N1TQo4TjM3eEx5T1p2NlRaMVl5cS9WNXJFSzkvNVorRzV0TVhOQ3FTQ0YwV0hzczZHMXdSTUdjbDJVWDBlMkdjaExmClVtTE8xTUUxV3FvUFJFUnFud29oN2RRaVVNTmJLNzJKNGo2cittbEt1T2tOKzVGdDRZZnd2R0o4Z0gzSEFJSzEKVjZSdzZ1VVltaXFWeEdsYjdaVHExV2FzTkhsWVVKa1ZuOFZQSlZEQXNpeWQvdnVzNTVPMHNNS3VsTTJJR2ZHbgp3eURwU2Iya3VHZTNEYVU3SXJqL0ppTThGQVFHTE5ZVjd3ZXBZSnF6RUNORGoyaWcwNmF3cU0zZVBqNUQ0TTFxCnFrOHBKRWk1NVF0MUhjWFhVUmpENWZJUnJEUjhuYzFRVlVFak5IVVFYbjl6Y2w5N1d3MmZ5a1ZXeE9oSXUxTzgKWnRidUlaMDlTeElxd1FDOElhRG1qa3N0WXlCNEF2bitMbjZwNWR0RWZEbEZ5VGs4U0FpZVNhZmhCUXV6RzdmWgpDM1NVbENUY1c2VW5IUUlEQVFBQk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQmdRQjdTYWVqR3oyVjN3K1VMbGNpCmJwbHhxZExUVGlPaC9KT0szcUNZQk9SMG9oa0kzcVpYYmtGWGJNRU5tL3RSS3plcUJnY3FsUGcxcXJQUGdsYnkKWWtjSHB1TWJKVzhmTHFldzVsL2dUM3lPL2VuZnBTcHR0SDdGaEtwbzhJTVByTnFxRU5DNU5vZDk0RUdTVnVBagowNnJFWmFnb0orczFZT0FoQ1BUUzV3WitqdFV1czdSWkJhRHhWMFUzTWpNQ1M3WlNpVWN6SG9PVWc4Nm1adW1DCitRdjFCdWIyd2d5ZTFKZEJ4N1RIUW5DTFRBYmlhRFVEdGZuTE5iYzRZL2RiN25Wci9Gd3cwYk52dytBSzVURUcKRUNPRldwQlZHQWgzQW1RajBlVWNDS2dnakljaE1nSjhvM21PRDRvT1diWDN0YnlocjE3bDc4Uk95MTFCUG50bwpsRko2RlhiMVlBaHFFZDdldDZVTjVHS2VpL0dTNzhxTStZSGkwWWZNOUNLMGhoamlUdkpqZjM3LzR4YUR5MnZWClUyVGthN0V5QlMrV3ZhNm02YnVTUmU0QU45YWhvcEREMEZ1WHFCQ0NxQnhQSCs0dmxHUC84T0JqZlYrcUFudE4KRFJ6SklUUUVZczZRd0plSUMxOUVtVThUUWpPb3VDMldDdDFjekV6RjNOQk83bFk9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K +kind: Secret +metadata: + creationTimestamp: null + name: client-certificates-stargate \ No newline at end of file diff --git a/test/testdata/fixtures/client-encryption-stargate/client-encryption-secret.yaml b/test/testdata/fixtures/client-encryption-stargate/client-encryption-secret.yaml new file mode 100644 index 000000000..182e4b58b --- /dev/null +++ b/test/testdata/fixtures/client-encryption-stargate/client-encryption-secret.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +data: + keystore: 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 + keystore-password: UmlwU1hJYnFVcWQyS2ZoSGF0QWdRVnlEcG1hQW5rWmI= + truststore: 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 + truststore-password: T3lhM1E0cWFXUkxKZDdGMm1hNkZEQnA4NEZKeUVrdTc= +kind: Secret +metadata: + creationTimestamp: null + name: client-encryption-stores-stargate \ No newline at end of file diff --git a/test/testdata/fixtures/client-encryption-stargate/server-encryption-secret.yaml b/test/testdata/fixtures/client-encryption-stargate/server-encryption-secret.yaml new file mode 100644 index 000000000..cb86ee5e3 --- /dev/null +++ b/test/testdata/fixtures/client-encryption-stargate/server-encryption-secret.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Secret +metadata: + name: server-encryption-stores +data: + keystore: >- + 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 + keystore-password: ZTJiczRxTGd2a0NiSVN0WkhlTURmOVFnbjFtQnJneUc= + truststore: >- + /u3+7QAAAAIAAAABAAAAAgAlY2Fzc2FuZHJhLW5vZGVfY2Fyb290XzIwMjIwMTIwXzEzNDkwMAAAAX53iISLAAVYLjUwOQAAA8gwggPEMIICrAIJAN4SZ4rcYXmzMA0GCSqGSIb3DQEBCwUAMIGjMQswCQYDVQQGEwJGUjEMMAoGA1UECAwDSURGMQ4wDAYDVQQHDAVQYXJpczERMA8GA1UECgwIRGF0YVN0YXgxFzAVBgNVBAsMDlNTTFRlc3RDbHVzdGVyMR0wGwYDVQQDDBRTU0xUZXN0Q2x1c3RlclJvb3RDQTErMCkGCSqGSIb3DQEJARYcYWxleC5kZWphbm92c2tpQGRhdGFzdGF4LmNvbTAeFw0yMjAxMjAxMjQ5MDBaFw00OTA2MDcxMjQ5MDBaMIGjMQswCQYDVQQGEwJGUjEMMAoGA1UECAwDSURGMQ4wDAYDVQQHDAVQYXJpczERMA8GA1UECgwIRGF0YVN0YXgxFzAVBgNVBAsMDlNTTFRlc3RDbHVzdGVyMR0wGwYDVQQDDBRTU0xUZXN0Q2x1c3RlclJvb3RDQTErMCkGCSqGSIb3DQEJARYcYWxleC5kZWphbm92c2tpQGRhdGFzdGF4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLKplNjaN5GwZTm5ihxPcDhIAs+LvHH0O6TVdkqixKVQ8JbjcQxlWwk9urq9h1/5vq+GUpA6eI3LcUsaUk6ioYbNTMfatpoBTQSBO3hsBqq9PsKugWmlgcTKo9VqfoB2NBCGEor1azUhbYlJmoBkly5EzpVFhk/779gAiq+Jul8SDuiObo57jdU9MZ2UkxFgladVWQQ6yl4MNwEaMYokCf3ZuvaPWkONAQ9pfhHcg8d0f5ZsYFCxDrMLRmNq8V4Bafyq2lzfpDRdzQMpfx/WmApLGjezcCSPBxSzEvOa6UfPDmJgUGZkBntNdlRpbKeJHrCfjdd8m34QRXQgJZy5MMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEARm3ZvvXzX2WgZ8632P6eooepO/BNuVfb8xnx6ZPnzwm3AUrQcnKvHUrXwIvxHJ8+uJ5PcgOJKp0EF1N7lBjmFST2uIoE+VUz5JtKhcq5ztZe05Fe2ZexX088bf3KqiPJsN8HfQ9lymYF+QT53g5RHTUcz7J7rIZm5epQwkmt0tZ2QfHiqyfOHXe/eweK2ndJs+MGnGyce/rlAlTtan4ZVq+9N7NFIUU2pKTk2tShksGDY8AsnQT9bKkcPgYoOrYuxaswkRWdQnIsttcaqnKNzM2fadWjm1T4Blxwv29BqEIxMbxfk250Zw8ved+Trjy4cnDDBj5Kii1cYzlr3tpzZf2sRVQb8Mm4j/dOkiA0HpqmUtN5 + truststore-password: bmthZ0xBdzhtelE2Q213T3J1ZHJWMmIzM3llYlhSQ1A= +type: Opaque \ No newline at end of file diff --git a/test/testdata/fixtures/multi-dc-encryption-stargate/k8ssandra.yaml b/test/testdata/fixtures/multi-dc-encryption-stargate/k8ssandra.yaml index 44d9eec6b..c271ef079 100644 --- a/test/testdata/fixtures/multi-dc-encryption-stargate/k8ssandra.yaml +++ b/test/testdata/fixtures/multi-dc-encryption-stargate/k8ssandra.yaml @@ -147,6 +147,6 @@ spec: name: server-encryption-stores clientEncryptionStores: keystoreSecretRef: - name: client-encryption-stores + name: client-encryption-stores-stargate truststoreSecretRef: - name: client-encryption-stores + name: client-encryption-stores-stargate diff --git a/test/testdata/fixtures/single-dc-encryption-stargate/k8ssandra.yaml b/test/testdata/fixtures/single-dc-encryption-stargate/k8ssandra.yaml index 0e748c8aa..cd1b42d4e 100644 --- a/test/testdata/fixtures/single-dc-encryption-stargate/k8ssandra.yaml +++ b/test/testdata/fixtures/single-dc-encryption-stargate/k8ssandra.yaml @@ -48,6 +48,6 @@ spec: name: server-encryption-stores clientEncryptionStores: keystoreSecretRef: - name: client-encryption-stores + name: client-encryption-stores-stargate truststoreSecretRef: - name: client-encryption-stores + name: client-encryption-stores-stargate