-
Notifications
You must be signed in to change notification settings - Fork 485
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Marcos Yacob <marcosyacob@gmail.com>
- Loading branch information
Showing
2 changed files
with
10 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
12 changes: 9 additions & 3 deletions
12
test/integration/suites/force-rotation-upstream-authority/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,12 @@ | ||
# Force rotation using upstream authority Suite | ||
# Force rotation with Upstream Authority Test Suite | ||
|
||
## Description | ||
|
||
This suite sets a very low TTLs and ensures that workload SVIDs are valid | ||
across many SVID and SPIRE server CA rotation periods. | ||
This test suite configures a disk-based Upstream Authority to validate the forced rotation and revocation of X.509 authorities. | ||
|
||
## Test steps | ||
|
||
1. **Prepare a new X.509 authority**: Verify that a new X.509 authority is successfully created. | ||
2. **Activate the new X.509 authority**: Ensure the new X.509 authority becomes the active authority. | ||
3. **Taint the old X.509 authority**: Confirm that the old X.509 authority is marked as tainted, and verify that the taint is propagated to the agent, triggering rotation of all X.509 SVIDs. | ||
4. **Revoke the tainted X.509 authority**: Validate that the revocation is propagated to the agent and that all SVIDs remove the revoked authority. |