testsuite icon indicating copy to clipboard operation
testsuite copied to clipboard

[Platform] SECURITY test: Ensure_Secrets_Encrypted

Open haskojur opened this issue 10 months ago • 0 comments

Title: [Platform] SECURITY test: ensure_secrets_encrypted

Is your workload test idea related to a problem? Please describe.

  • In Kubernetes systems, there's a risk that data stored in secrets in etcd may not be adequately encrypted, potentially being only encoded. If data are merely encoded, they can be easily decoded by unauthorized individuals, compromising sensitive information.

Describe the solution you'd like

  • This new test case aims to verify whether data stored in secrets are properly encrypted in etcd key-value store, thereby ensuring enhanced security of the Kubernetes environment. This will also follow best practices for Kubernetes secrets.

Test Category Name

  • PLATFORM

Type of test (static or runtime)

  • static

Documentation tasks:

  • [ ] Update installation instructions if needed
  • [ ] Update Test Categories md if needed
  • [ ] Update USAGE md if needed
    • [ ] How to run
    • [ ] Description and details
      • [ ] What the best practice is
      • [ ] Why are we testing this
    • [ ] Remediation steps if test does not pass

QA tasks

Dev Review:

  • [ ] walk through A/C
  • [ ] do you get the expected result?
  • [ ] if yes,
    • [ ] move to Needs Peer Review column
    • [ ] create Pull Request and follow check list
    • [ ] Assign 1 or more people for peer review
  • [ ] if no, document what additional tasks will be needed

Peer review:

  • [ ] walk through A/C
  • [ ] do you get the expected result?
  • [ ] if yes,
    • [ ] move to Reviewer Approved column
    • [ ] Approve pull request
  • [ ] if no,
    • [ ] document what did not go as expected, including error messages and screenshots (if possible)
    • [ ] Add comment to pull request
    • [ ] request changes to pull request

haskojur avatar Apr 12 '24 14:04 haskojur