tests: update e2e tests for new policy

Now that the default policy does not allow the sample evidence, update the e2e tests to set a permissive policy first. Signed-off-by: Tobin Feldman-Fitzthum <[email protected]>
confidential-containers · Jan 11, 2024 · 2643a8a · 2643a8a
1 parent 90aad6c
commit 2643a8a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/kbs/test/Makefile b/kbs/test/Makefile
@@ -98,6 +98,9 @@ stop-resource-kbs: resource-kbs.PID
 	kill $$(cat $<) && rm $<
 
 test-bgcheck: client start-kbs
+	RUST_LOG=kbs_protocol=warn ./client \
+		config --auth-private-key kbs.key \
+		set-resource-policy --policy-file $(MAKEFILE_DIR)/data/policy_2.rego && \
 	RUST_LOG=kbs_protocol=error ./client get-resource \
 		 --path one/two/three \
 		 | base64 -d > roundtrip_secret && \
@@ -111,6 +114,9 @@ attestation_token: client tee.key start-kbs
 		> attestation_token
 
 test-passport: client attestation_token start-resource-kbs
+	RUST_LOG=kbs_protocol=warn ./client --url http://127.0.0.1:50002 \
+		config --auth-private-key kbs.key \
+		set-resource-policy --policy-file $(MAKEFILE_DIR)/data/policy_2.rego && \
 	RUST_LOG=kbs_protocol=warn ./client --url http://127.0.0.1:50002 get-resource \
 		--attestation-token attestation_token \
 		--tee-key-file tee.key \