Skip to content

Commit b334c40

Browse files
committed
updated backup with test for 3-10
1 parent a708a17 commit b334c40

File tree

2 files changed

+27
-3
lines changed

2 files changed

+27
-3
lines changed

test/test-ghe-backup.sh

Lines changed: 26 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -832,7 +832,7 @@ begin_test "ghe-backup takes backup of secret scanning encrypted secrets encrypt
832832
)
833833
end_test
834834

835-
begin_test "ghe-backup takes backup of secret scanning encrypted content encryption keys"
835+
begin_test "ghe-backup does not take backups of secret scanning encrypted content encryption keys on versions below 3.11.0"
836836
(
837837
set -e
838838

@@ -844,7 +844,31 @@ begin_test "ghe-backup takes backup of secret scanning encrypted content encrypt
844844
ghe-ssh "$GHE_HOSTNAME" -- ghe-config "$secret" "foo"
845845
done
846846

847-
ghe-backup
847+
GHE_REMOTE_VERSION=3.10.0 ghe-backup -v | grep -q "secret scanning encrypted content" && exit 1
848+
849+
required_files=(
850+
"secret-scanning-user-content-delimited-encryption-root-keys"
851+
)
852+
853+
for file in "${required_files[@]}"; do
854+
[ "$(cat "$GHE_DATA_DIR/current/$file")" = "" ]
855+
done
856+
)
857+
end_test
858+
859+
begin_test "ghe-backup takes backup of secret scanning encrypted content encryption keys on versions 3.11.0+"
860+
(
861+
set -e
862+
863+
required_secrets=(
864+
"secret-scanning.secret-scanning-user-content-delimited-encryption-root-keys"
865+
)
866+
867+
for secret in "${required_secrets[@]}"; do
868+
ghe-ssh "$GHE_HOSTNAME" -- ghe-config "$secret" "foo"
869+
done
870+
871+
GHE_REMOTE_VERSION=3.11.0 ghe-backup
848872

849873
required_files=(
850874
"secret-scanning-user-content-delimited-encryption-root-keys"

test/test-ghe-restore.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -475,7 +475,7 @@ begin_test "ghe-restore with secret scanning encrypted content encryption keys f
475475
)
476476

477477
for secret in "${required_secrets[@]}"; do
478-
[ "$(ghe-ssh "$GHE_HOSTNAME" -- ghe-config "$secret")" = "foo" ] # expecting these to not be set for versions below 3.11.0
478+
[ "$(ghe-ssh "$GHE_HOSTNAME" -- ghe-config "$secret")" = "foo" ] # if this fails, it should fail silently for versions below 3.10
479479
done
480480
)
481481
end_test

0 commit comments

Comments
 (0)