(t *testing.T)
| 160 | } |
| 161 | |
| 162 | func TestMasterKey_EncryptIfNeeded(t *testing.T) { |
| 163 | t.Run("not encrypted", func(t *testing.T) { |
| 164 | key, err := NewMasterKeyFromURL(mockAzureURL) |
| 165 | assert.NoError(t, err) |
| 166 | |
| 167 | err = key.Encrypt([]byte("some data")) |
| 168 | assert.Error(t, err) |
| 169 | assert.ErrorContains(t, err, "failed to encrypt sops data key with Azure Key Vault key") |
| 170 | }) |
| 171 | |
| 172 | t.Run("already encrypted", func(t *testing.T) { |
| 173 | encryptedKey := "encrypted" |
| 174 | key, err := NewMasterKeyFromURL(mockAzureURL) |
| 175 | assert.NoError(t, err) |
| 176 | key.EncryptedKey = encryptedKey |
| 177 | |
| 178 | assert.NoError(t, key.EncryptIfNeeded([]byte("other data"))) |
| 179 | assert.Equal(t, encryptedKey, key.EncryptedKey) |
| 180 | }) |
| 181 | } |
| 182 | |
| 183 | func TestMasterKey_NeedsRotation(t *testing.T) { |
| 184 | key := newMasterKey("", "", "") |
nothing calls this directly
no test coverage detected