Uploaded image for project: 'OpenShift API Server'
  1. OpenShift API Server
  2. API-1569 Stabilize encryption at rest
  3. API-1607

Run encryption tests in a periodic job to detect regression.

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Unresolved
    • Undefined
    • None
    • None
    • kube-apiserver
    • False
    • None
    • False
    • OCPSTRAT-1344 - [API] Support soft-rotation of ETCD datastore encryption

    Description

      As of today the encryption tests are only run when a PR is opened against one of the following repository: kas-o, oas-o or cao. Actually opening a PR is not enough because the encryption CI jobs have defined a filter on specific paths.

      There is a risk that breaking changes to operands (i.e. openshift-apiserver) won't be detected. In the worst case scenario we might even release the product with a faulty component (Although I hope that the QA have a list of manual e2e tests they execute before releasing.

      To fix the current situation we need to move encryption tests to the origin repository and create a periodic job that would be monitored by the TRT team.

      Attachments

        Activity

          People

            lszaszki@redhat.com Lukasz Szaszkiewicz
            lszaszki@redhat.com Lukasz Szaszkiewicz
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: