cnti-testcatalog / testsuite

📞📱☎️📡🌐 Cloud Native Telecom Initiative (CNTI) Test Catalog is a tool to check for and provide feedback on the use of K8s + cloud native best practices in networking applications and platforms
https://wiki.lfnetworking.org/display/LN/Test+Catalog
Apache License 2.0
169 stars 70 forks source link

Test: Verify if secrets are encrypted #1971

Open haskojur opened 2 months ago

haskojur commented 2 months ago

Description

By default in kubernetes system, encrypting of data inside object like secret is not enabled, so data in etcd are available for potential attacker. Encrypting of secret is possible in newer versions of kubernetes. When this configuration is done, all newly created secrets has encrypted data in etcd key-value store. We can use kubescape test to cover this area.

Issues:

Refs: #1970

How has this been tested:

Types of changes:

Checklist:

Documentation

Code Review

Issue

agentpoyo commented 2 months ago

Please create WIP or DRAFT PRs as DRAFT's when creating, this will prevent any accidental merges as "Draft" status will grey out the "merge" button until they're actually ready for review and merging.

haskojur commented 2 months ago

@HashNuke I think this one is ready for test