page6
5
E2E Coverage by Component
ZTWIM Coverage
SpireServer
E2E checks: install, conditions, StatefulSet ready; resources, nodeSelector/tolerations, affinity, log level; Upgradeable when pod is deleted and recovers; label propagation to StatefulSet.
SpireAgent
Same as SpireServer but for a DaemonSet: install, conditions, resources, placement, log level; label propagation and removal when spec.labels is cleared.
SpiffeCSIDriver
Install, conditions, DaemonSet ready; resources, nodeSelector/tolerations, affinity; label propagation. (No log level or Upgradeable-on-pod-delete tests.)
SpireOIDCDiscoveryProvider
Install, conditions, Deployment ready; resources, nodeSelector/tolerations, affinity, log level; Upgradeable when OIDC pod is deleted and recovers; label propagation.
ZeroTrustWorkloadIdentityManager
CR creation, global config (BundleConfigMap, TrustDomain, ClusterName); status aggregation for all four operands; CreateOnlyMode condition from Subscription env.