Testing

This doc lists the different Secrets Store CSI Driver scenarios tested as part of CI.

E2E tests

Test Category	Azure	Vault	GCP
Mount tests CSI Inline volume test with Pod Portability	✔️	✔️	✔️
Sync as Kubernetes secrets Check Kubernetes secret Check owner references in secret with multiple owners Check owner references updated when a owner is deleted Check secret deleted when all owners deleted	✔️	✔️
Namespaced Scope SecretProviderClass Check SecretProviderClass in same namespace as pod	✔️	✔️
Namespaced Scope SecretProviderClass negative test Check volume mount fails when SecretProviderClass not found in same namespace as pod	✔️	✔️
Multiple SecretProviderClass Check multiple CSI Inline volumes with different SecretProviderClass	✔️	✔️
Autorotation of mount contents and Kubernetes secrets Check mount content and Kubernetes secret updated after rotation	✔️
Test filtered watch for nodePublishSecretRef feature Check labelled nodePublishSecretRef accessible after upgrade to enable filteredWatchSecret feature	✔️		✔️
Windows tests	✔️

Sanity tests

CSI Driver sanity tests using CSI Driver Sanity Tester to ensure Secrets Store CSI Driver conforms to the CSI specification.