apiVersion: apiextensions.k8s.io/v1 # Hack because controller-gen complains if we don't have this
name: "[CustomNoUpgrade] APIServer"
crd: 0000_10_config-operator_01_apiserver-CustomNoUpgrade.crd.yaml
tests:
  onCreate:
    - name: Should be able to create encrypt with aescbc
      initial: |
        apiVersion: config.openshift.io/v1
        kind: APIServer
        spec:
          encryption:
            type: aescbc
      expected: |
        apiVersion: config.openshift.io/v1
        kind: APIServer
        spec:
          audit:
            profile: Default
          encryption:
            type: aescbc
    - name: Should be able to create encrypt with aesgcm
      initial: |
        apiVersion: config.openshift.io/v1
        kind: APIServer
        spec:
          encryption:
            type: aesgcm
      expected: |
        apiVersion: config.openshift.io/v1
        kind: APIServer
        spec:
          audit:
            profile: Default
          encryption:
            type: aesgcm
