testsuite icon indicating copy to clipboard operation
testsuite copied to clipboard

Test: Verify if secrets are encrypted

Open haskojur opened this issue 10 months ago • 2 comments

Description

By default in kubernetes system, encrypting of data inside object like secret is not enabled, so data in etcd are available for potential attacker. Encrypting of secret is possible in newer versions of kubernetes. When this configuration is done, all newly created secrets has encrypted data in etcd key-value store. We can use kubescape test to cover this area.

Issues:

Refs: #1970

How has this been tested:

  • [ ] Covered by existing integration testing
  • [ ] Added integration testing to cover
  • [ ] Verified all A/C passes
    • [ ] develop
    • [ ] master
    • [ ] tag/other branch
  • [ ] Test environment
    • [ ] Shared Packet K8s cluster
    • [ ] New Packet K8s cluster
    • [X] Kind cluster
  • [ ] Have not tested

Types of changes:

  • [ ] Bug fix (non-breaking change which fixes an issue)
  • [X] New feature (non-breaking change which adds functionality)
  • [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • [x] Documentation update

Checklist:

Documentation

  • [x] My change requires a change to the documentation.
  • [x] I have updated the documentation accordingly.
  • [ ] No updates required.

Code Review

  • [ ] Does the test handle fatal exceptions, ie. rescue block

Issue

  • [ ] Tasks in issue are checked off

haskojur avatar Apr 15 '24 07:04 haskojur

Please create WIP or DRAFT PRs as DRAFT's when creating, this will prevent any accidental merges as "Draft" status will grey out the "merge" button until they're actually ready for review and merging.

agentpoyo avatar Apr 15 '24 22:04 agentpoyo

@HashNuke I think this one is ready for test

haskojur avatar May 03 '24 07:05 haskojur