apiVersion: apiextensions.k8s.io/v1 # Hack because controller-gen complains if we don't have this
name: "[Stable] APIServer"
crd: 0000_10_config-operator_01_apiserver-Default.crd.yaml
tests:
  onCreate:
  - name: Should be able to create encrypt with aescbc
    initial: |
      apiVersion: config.openshift.io/v1
      kind: APIServer
      spec:
        encryption:
          type: aescbc
    expected: |
      apiVersion: config.openshift.io/v1
      kind: APIServer
      spec:
        audit:
          profile: Default
        encryption:
          type: aescbc
  - name: Should be able to create encrypt with aesgcm
    initial: |
      apiVersion: config.openshift.io/v1
      kind: APIServer
      spec:
        encryption:
          type: aesgcm
    expected: |
      apiVersion: config.openshift.io/v1
      kind: APIServer
      spec:
        audit:
          profile: Default
        encryption:
          type: aesgcm