testsuite
testsuite copied to clipboard
[Platform] SECURITY test: Ensure_Secrets_Encrypted
Title: [Platform] SECURITY test: ensure_secrets_encrypted
Is your workload test idea related to a problem? Please describe.
- In Kubernetes systems, there's a risk that data stored in secrets in etcd may not be adequately encrypted, potentially being only encoded. If data are merely encoded, they can be easily decoded by unauthorized individuals, compromising sensitive information.
Describe the solution you'd like
- This new test case aims to verify whether data stored in secrets are properly encrypted in etcd key-value store, thereby ensuring enhanced security of the Kubernetes environment. This will also follow best practices for Kubernetes secrets.
Test Category Name
- PLATFORM
Type of test (static or runtime)
- static
Documentation tasks:
- [ ] Update installation instructions if needed
- [ ] Update Test Categories md if needed
- [ ] Update USAGE md if needed
- [ ] How to run
- [ ] Description and details
- [ ] What the best practice is
- [ ] Why are we testing this
- [ ] Remediation steps if test does not pass
QA tasks
Dev Review:
- [ ] walk through A/C
- [ ] do you get the expected result?
- [ ] if yes,
- [ ] move to
Needs Peer Review
column - [ ] create Pull Request and follow check list
- [ ] Assign 1 or more people for peer review
- [ ] move to
- [ ] if no, document what additional tasks will be needed
Peer review:
- [ ] walk through A/C
- [ ] do you get the expected result?
- [ ] if yes,
- [ ] move to
Reviewer Approved
column - [ ] Approve pull request
- [ ] move to
- [ ] if no,
- [ ] document what did not go as expected, including error messages and screenshots (if possible)
- [ ] Add comment to pull request
- [ ] request changes to pull request