mozilla
/
sops
зеркало из https://github.com/getsops/sops.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
sops/functional-tests/.sops.yaml

29 строки
1.0 KiB
YAML
Исходник Обычный вид История

Test file encryption
2016-11-13 18:36:43 +03:00
creation_rules:
Implement `sops publish` command (#473) * Implement `sops publish` command Publishes a file to a pre-configured destination (this lives in the sops config file). Additionally, support re-encryption rules that work just like the creation rules. Initial support for S3/GCS. This is a part of the sops-workspace v2.0 project Includes the addition of a new dependency: github.com/googleapis/gax-go/v2 * code review changes; support global --verbose flag * Switch to recreation_rule with full support Reencryption rule is now recreation rule and supports everything that a creation rule does. Now, when you load a config for a file, you load either the creation rule or the destination rule. I'm not sure about this style long term, but it allows for support to be added for the recreation rules without a bigger refactor of how the config file works. * split loadForFileFromBytes into two functions remove branching based on destination rule or not, create one for creation rules and one for destination rules * pretty diff for keygroup updates in sops publish
2019-06-27 19:48:54 +03:00
- path_regex: test_roundtrip_keygroups.yaml
Fix shamir tests
2017-08-25 23:12:34 +03:00
key_groups:
Allow using lists in key groups in .sops.yaml
2017-09-12 21:38:03 +03:00
- pgp:
Replace old functional test gpg keys (#512) Two of the three old keys have expired, so create a new set with no expiration.
2019-08-30 19:07:00 +03:00
- FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
Allow using lists in key groups in .sops.yaml
2017-09-12 21:38:03 +03:00
- pgp:
Replace old functional test gpg keys (#512) Two of the three old keys have expired, so create a new set with no expiration.
2019-08-30 19:07:00 +03:00
- D7229043384BCC60326C6FB9D8720D957C3D3074
Implement `sops publish` command (#473) * Implement `sops publish` command Publishes a file to a pre-configured destination (this lives in the sops config file). Additionally, support re-encryption rules that work just like the creation rules. Initial support for S3/GCS. This is a part of the sops-workspace v2.0 project Includes the addition of a new dependency: github.com/googleapis/gax-go/v2 * code review changes; support global --verbose flag * Switch to recreation_rule with full support Reencryption rule is now recreation rule and supports everything that a creation rule does. Now, when you load a config for a file, you load either the creation rule or the destination rule. I'm not sure about this style long term, but it allows for support to be added for the recreation rules without a bigger refactor of how the config file works. * split loadForFileFromBytes into two functions remove branching based on destination rule or not, create one for creation rules and one for destination rules * pretty diff for keygroup updates in sops publish
2019-06-27 19:48:54 +03:00
- path_regex: test_roundtrip_keygroups_missing_decryption_key.yaml
Fix shamir tests
2017-08-25 23:12:34 +03:00
key_groups:
Allow using lists in key groups in .sops.yaml
2017-09-12 21:38:03 +03:00
- pgp:
Replace old functional test gpg keys (#512) Two of the three old keys have expired, so create a new set with no expiration.
2019-08-30 19:07:00 +03:00
- FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
Allow using lists in key groups in .sops.yaml
2017-09-12 21:38:03 +03:00
- pgp:
Replace old functional test gpg keys (#512) Two of the three old keys have expired, so create a new set with no expiration.
2019-08-30 19:07:00 +03:00
- B611A2F9F11D0FF82568805119F9B5DAEA91FF86
- pgp: FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
Implement `sops publish` command (#473) * Implement `sops publish` command Publishes a file to a pre-configured destination (this lives in the sops config file). Additionally, support re-encryption rules that work just like the creation rules. Initial support for S3/GCS. This is a part of the sops-workspace v2.0 project Includes the addition of a new dependency: github.com/googleapis/gax-go/v2 * code review changes; support global --verbose flag * Switch to recreation_rule with full support Reencryption rule is now recreation rule and supports everything that a creation rule does. Now, when you load a config for a file, you load either the creation rule or the destination rule. I'm not sure about this style long term, but it allows for support to be added for the recreation rules without a bigger refactor of how the config file works. * split loadForFileFromBytes into two functions remove branching based on destination rule or not, create one for creation rules and one for destination rules * pretty diff for keygroup updates in sops publish
2019-06-27 19:48:54 +03:00
destination_rules:
- s3_bucket: "sops-publish-functional-tests"
s3_prefix: "functional-test/"
path_regex: test_encrypt_publish_s3.json
reencryption_rule:
Replace old functional test gpg keys (#512) Two of the three old keys have expired, so create a new set with no expiration.
2019-08-30 19:07:00 +03:00
pgp: B611A2F9F11D0FF82568805119F9B5DAEA91FF86
Adds support for sops publish-ing to Vault (#494) * Add vault/api to vendor/ * Adds support for sops publish-ing to Vault * Adds support for publishing secrets (unencrypted) to Vault * Adds a new EmitAsMap for TreeBanches * Adds documentation about sops publish-ing to Vault * Initial integration/functional test for publishing to vault
2019-07-17 00:33:59 +03:00
- vault_path: "functional-test/"
vault kv version and mount names in publish config (#513) Adds support for publishing to vault using KV v1 and a different mount name (or multiple).
2019-08-30 23:44:04 +03:00
vault_kv_mount_name: "secret/"
vault_kv_version: 2
Adds support for sops publish-ing to Vault (#494) * Add vault/api to vendor/ * Adds support for sops publish-ing to Vault * Adds support for publishing secrets (unencrypted) to Vault * Adds a new EmitAsMap for TreeBanches * Adds documentation about sops publish-ing to Vault * Initial integration/functional test for publishing to vault
2019-07-17 00:33:59 +03:00
path_regex: test_encrypt_publish_vault.json
vault kv version and mount names in publish config (#513) Adds support for publishing to vault using KV v1 and a different mount name (or multiple).
2019-08-30 23:44:04 +03:00
- vault_path: "functional-test-version-1/"
vault_kv_mount_name: "kv/"
vault_kv_version: 1
path_regex: test_encrypt_publish_vault_version_1.json