Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1,814 changes: 1,814 additions & 0 deletions ginkgo-test/eso/eso.go

Large diffs are not rendered by default.

642 changes: 642 additions & 0 deletions ginkgo-test/eso/eso_utils.go

Large diffs are not rendered by default.

21 changes: 21 additions & 0 deletions ginkgo-test/testdata/eso/clustergenerator-password.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: generator-template
objects:
- apiVersion: generators.external-secrets.io/v1alpha1
kind: ClusterGenerator
metadata:
name: "${NAME}"
spec:
kind: Password
generator:
passwordSpec:
length: 16
digits: 5
symbols: 5
symbolCharacters: "-_$@"
noUpper: false
allowRepeat: true
parameters:
- name: NAME
37 changes: 37 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-awsps.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRef:
name: "${SECRETSTORENAME}"
kind: SecretStore
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
data:
- secretKey: "${SECRETKEY}"
remoteRef:
key: "${KEY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-from-awssm"
- name: CREATIONPOLICY
value: "Owner"
- name: SECRETKEY
value: "secret-value-from-awssm"
- name: KEY
value: "esoSecret"



45 changes: 45 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-awssm.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRef:
name: "${SECRETSTORENAME}"
kind: SecretStore
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
deletionPolicy: "${DELPOLICY}"
data:
- secretKey: "${SECRETKEY}"
remoteRef:
key: "${KEY}"
property: "${PROPERTY}"
dataFrom:
- extract:
key: "${KEY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-from-awssm"
- name: CREATIONPOLICY
value: "Owner"
- name: DELPOLICY
value: "Retain"
- name: SECRETKEY
value: "secret-value-from-awssm"
- name: KEY
value: "jitliSecret"
- name: PROPERTY



44 changes: 44 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-gcpsm-version.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRef:
name: "${SECRETSTORENAME}"
kind: SecretStore
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
deletionPolicy: "${DELETEPOLICY}"
data:
- secretKey: "${SECRETKEY}"
remoteRef:
key: "${KEY}"
version: "${VERSION}"
dataFrom:
- extract:
key: "${FROMKEY}"
version: "${FROMVERSION}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-from-awssm"
- name: CREATIONPOLICY
value: "Owner"
- name: DELETEPOLICY
value: "Retain"
- name: SECRETKEY
value: "secret-value-from-awssm"
- name: KEY
- name: VERSION
- name: FROMKEY
- name: FROMVERSION
40 changes: 40 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-gcpsm.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRef:
name: "${SECRETSTORENAME}"
kind: SecretStore
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
deletionPolicy: "${DELETEPOLICY}"
data:
- secretKey: "${SECRETKEY}"
remoteRef:
key: "${KEY}"
dataFrom:
- extract:
key: "${FROMKEY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-from-awssm"
- name: CREATIONPOLICY
value: "Owner"
- name: DELETEPOLICY
value: "Retain"
- name: SECRETKEY
value: "secret-value-from-awssm"
- name: KEY
- name: FROMKEY
30 changes: 30 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-generator.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
dataFrom:
- sourceRef:
generatorRef:
apiVersion: generators.external-secrets.io/v1alpha1
kind: "${GENERATORKIND}"
name: "${GENERATOR}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETNAME
value: "secret-from-generator"
- name: CREATIONPOLICY
value: "Owner"
- name: GENERATORKIND
- name: GENERATOR
35 changes: 35 additions & 0 deletions ginkgo-test/testdata/eso/externalsecret-vault.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRef:
name: "${SECRETSTORENAME}"
kind: SecretStore
target:
name: "${SECRETNAME}"
creationPolicy: "${CREATIONPOLICY}"
data:
- secretKey: "${SECRETKEY}"
remoteRef:
key: "${KEY}"
property: "${PROPERTY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-from-vault"
- name: CREATIONPOLICY
value: "Owner"
- name: SECRETKEY
value: "secret-value-from-vault"
- name: KEY
- name: PROPERTY
18 changes: 18 additions & 0 deletions ginkgo-test/testdata/eso/generator-password.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: generator-template
objects:
- apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
name: "${NAME}"
spec:
length: 16
digits: 5
symbols: 5
symbolCharacters: "-_$@"
noUpper: false
allowRepeat: true
parameters:
- name: NAME
30 changes: 30 additions & 0 deletions ginkgo-test/testdata/eso/helm-vault-config.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
# xref: https://github.com/hashicorp/vault-helm/blob/main/values.yaml All available parameters and default values for the Vault chart.
# Set 'server.dataStorage.size' to 1Gi as the default 10Gi is too expensive and unnecessary for testing propose in CI.
global:
enabled: true
tlsDisable: true
openshift: true
injector:
enabled: false
server:
ui:
enabled: true
image:
repository: "quay.io/openshifttest/vault"
tag: "1.19.0"
dataStorage:
enabled: true
size: 1Gi
extraEnvironmentVars: {}
standalone:
enabled: true
config: |
listener "tcp" {
tls_disable = 1
address = "[::]:8200"
cluster_address = "[::]:8201"
}
storage "file" {
path = "/vault/data"
}
ui = true
4 changes: 4 additions & 0 deletions ginkgo-test/testdata/eso/namespace.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: external-secrets-operator
8 changes: 8 additions & 0 deletions ginkgo-test/testdata/eso/operandConfig.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
apiVersion: operator.openshift.io/v1alpha1
kind: ExternalSecrets
metadata:
labels:
app.kubernetes.io/name: external-secrets-operator
app.kubernetes.io/managed-by: kustomize
name: cluster
spec: {}
5 changes: 5 additions & 0 deletions ginkgo-test/testdata/eso/operatorgroup.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
name: external-secrets-og
namespace: external-secrets-operator
31 changes: 31 additions & 0 deletions ginkgo-test/testdata/eso/pushsecret-aws-secretkey.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRefs:
- name: "${SECRETSTORENAME}"
kind: SecretStore
selector:
secret:
name: "${SECRETNAME}"
data:
- match:
secretKey: "${SECRETKEY}"
remoteRef:
remoteKey: "${KEY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-push-parameter-store"
- name: SECRETKEY
- name: KEY
29 changes: 29 additions & 0 deletions ginkgo-test/testdata/eso/pushsecret-aws.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: externalsecret-template
objects:
- apiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
name: "${NAME}"
spec:
refreshInterval: "${REFREASHINTERVAL}"
secretStoreRefs:
- name: "${SECRETSTORENAME}"
kind: SecretStore
selector:
secret:
name: "${SECRETNAME}"
data:
- match:
remoteRef:
remoteKey: "${KEY}"
parameters:
- name: NAME
- name: REFREASHINTERVAL
value: "1m"
- name: SECRETSTORENAME
- name: SECRETNAME
value: "secret-push-parameter-store"
- name: KEY
Loading