mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-19 18:02:01 +00:00
[KMSv2] Add kind cluster and encryption config for e2e
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
This commit is contained in:
parent
cfa295f569
commit
4e6d5dddfb
8
test/e2e/testing-manifests/auth/encrypt/OWNERS
Normal file
8
test/e2e/testing-manifests/auth/encrypt/OWNERS
Normal file
@ -0,0 +1,8 @@
|
||||
# See the OWNERS docs at https://go.k8s.io/owners
|
||||
|
||||
approvers:
|
||||
- sig-auth-encryption-at-rest-approvers
|
||||
reviewers:
|
||||
- sig-auth-encryption-at-rest-reviewers
|
||||
labels:
|
||||
- sig/auth
|
@ -0,0 +1,10 @@
|
||||
apiVersion: apiserver.config.k8s.io/v1
|
||||
kind: EncryptionConfiguration
|
||||
resources:
|
||||
- resources:
|
||||
- secrets
|
||||
providers:
|
||||
- secretbox:
|
||||
keys:
|
||||
- name: key1
|
||||
secret: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
|
31
test/e2e/testing-manifests/auth/encrypt/kind.yaml
Normal file
31
test/e2e/testing-manifests/auth/encrypt/kind.yaml
Normal file
@ -0,0 +1,31 @@
|
||||
kind: Cluster
|
||||
apiVersion: kind.x-k8s.io/v1alpha4
|
||||
nodes:
|
||||
- role: control-plane
|
||||
extraMounts:
|
||||
- containerPath: /etc/kubernetes/encryption-config.yaml
|
||||
hostPath: test/e2e/testing-manifests/auth/encrypt/encryption-config.yaml
|
||||
readOnly: true
|
||||
propagation: None
|
||||
kubeadmConfigPatches:
|
||||
- |
|
||||
kind: ClusterConfiguration
|
||||
apiServer:
|
||||
extraArgs:
|
||||
encryption-provider-config: "/etc/kubernetes/encryption-config.yaml"
|
||||
v: "5"
|
||||
extraVolumes:
|
||||
- name: encryption-config
|
||||
hostPath: "/etc/kubernetes/encryption-config.yaml"
|
||||
mountPath: "/etc/kubernetes/encryption-config.yaml"
|
||||
readOnly: true
|
||||
pathType: File
|
||||
scheduler:
|
||||
extraArgs:
|
||||
v: "5"
|
||||
controllerManager:
|
||||
extraArgs:
|
||||
v: "5"
|
||||
- role: worker
|
||||
- role: worker
|
||||
- role: worker
|
Loading…
Reference in New Issue
Block a user