kbs: fix the configuration file read test

This commit fixes the unit test items for kbs configuration item reading
to ensure strict compliance between the content configured in the
original configuration file and the code. Configuration items that are
not given are assigned default values in the expected object of the unit
test.

Signed-off-by: Xynnn007 <[email protected]>

kbs/config/kubernetes/base/kbs-config.toml

@@ -30,4 +30,3 @@ auth_public_key = "/kbs/kbs.pem"
 name = "resource"
 type = "LocalFs"
 dir_path = "/opt/confidential-containers/kbs/repository"
-

kbs/src/config.rs

@@ -429,6 +429,7 @@ mod tests {
                         }),
                         attestation_token_broker: AttestationTokenConfig::Simple(simple::Configuration {
                             duration_min: 5,
+                            policy_dir: "/opt/confidential-containers/attestation-service/simple-policies".into(),
                             ..Default::default()
                         }),
                     }

kbs/test_data/configs/coco-as-builtin-1.toml

@@ -2,10 +2,22 @@
 type = "coco_as_builtin"
 work_dir = "/opt/coco/attestation-service"
 policy_engine = "opa"
+timeout = 5
 
-    [attestation_service.attestation_token_broker]
-    type = "Simple"
+[attestation_service.attestation_token_broker]
+type = "Simple"
+issuer_name = "CoCo-Attestation-Service"
 
 [attestation_service.rvps_config]
 type = "GrpcRemote"
 address = "http://127.0.0.1:50003"
+
+[http_server]
+sockets = ["127.0.0.1:8080"]
+insecure_http = false
+
+[admin]
+insecure_api = false
+
+[policy_engine]
+policy_path = "/opt/confidential-containers/kbs/policy.rego"

kbs/test_data/configs/coco-as-builtin-2.toml

@@ -10,6 +10,7 @@ insecure_http = true
 type = "coco_as_builtin"
 work_dir = "/opt/confidential-containers/attestation-service"
 policy_engine = "opa"
+timeout = 5
 
 [attestation_service.attestation_token_broker]
 type = "Simple"
@@ -21,3 +22,4 @@ store_type = "LocalFs"
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+insecure_api = false

kbs/test_data/configs/coco-as-builtin-3.toml

@@ -2,15 +2,18 @@
 insecure_http = true
 
 [attestation_token]
+insecure_key = false
 
 [attestation_service]
 type = "coco_as_builtin"
 work_dir = "/opt/confidential-containers/attestation-service"
 policy_engine = "opa"
+timeout = 5
 
 [attestation_service.attestation_token_broker]
 type = "Simple"
 duration_min = 5
+policy_dir = "/opt/confidential-containers/attestation-service/simple-policies"
 
 [attestation_service.rvps_config]
 type = "BuiltIn"

kbs/test_data/configs/coco-as-grpc-2.toml

@@ -7,6 +7,7 @@ insecure_http = true
 [attestation_service]
 type = "coco_as_grpc"
 as_addr = "http://as:50004"
+timeout = 5
 
 [admin]
 auth_public_key = "/opt/confidential-containers/kbs/user-keys/public.pub"

kbs/test_data/configs/coco-as-grpc-3.toml

@@ -7,6 +7,7 @@ insecure_http = true
 type = "coco_as_grpc"
 as_addr = "http://127.0.0.1:50004"
 pool_size = 100
+timeout = 5
 
 [admin]
 insecure_api = true

kbs/test_data/configs/intel-ta-1.toml

@@ -7,6 +7,7 @@ base_url = "example.io"
 api_key = "this-is-a-key"
 certs_file = "file:///etc/ita-cert.pem"
 allow_unmatched_policy = true
+timeout = 5
 
 [http_server]
 sockets = ["0.0.0.0:8080"]

kbs/test_data/configs/intel-ta-2.toml

@@ -12,6 +12,8 @@ type = "intel_ta"
 base_url = "https://api.trustauthority.intel.com"
 api_key = "tBfd5kKX2x9ahbodKV1..."
 certs_file = "https://portal.trustauthority.intel.com"
+timeout = 5
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+insecure_api = false

kbs/test_data/configs/intel-ta-3.toml

@@ -12,3 +12,4 @@ type = "intel_ta"
 base_url = "https://api.trustauthority.intel.com"
 api_key = "tBfd5kKX2x9ahbodKV1..."
 certs_file = "https://portal.trustauthority.intel.com"
+timeout = 5