-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Expand file tree
/
Copy pathQE-Text-compactStructuredEncryptionData.yml
More file actions
138 lines (138 loc) · 4.87 KB
/
QE-Text-compactStructuredEncryptionData.yml
File metadata and controls
138 lines (138 loc) · 4.87 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
description: QE-Text-compactStructuredEncryptionData
schemaVersion: "1.25"
runOnRequirements:
- minServerVersion: "8.2.0" # Server 8.2.0 adds preview support for QE text queries.
maxServerVersion: "8.99.99" # Server 9.0.0-rc0 removes support for "prefixPreview" and "suffixPreview": SERVER-123416
topologies: ["replicaset", "sharded", "load-balanced"] # QE does not support standalone.
csfle:
minLibmongocryptVersion: 1.15.0 # For SPM-4158.
createEntities:
- client:
id: &client "client"
autoEncryptOpts:
keyVaultNamespace: keyvault.datakeys
kmsProviders:
local:
key: Mng0NCt4ZHVUYUJCa1kxNkVyNUR1QURhZ2h2UzR2d2RrZzh0cFBwM3R6NmdWMDFBMUN3YkQ5aXRRMkhGRGdQV09wOGVNYUMxT2k3NjZKelhaQmRCZGJkTXVyZG9uSjFk
observeEvents:
- commandStartedEvent
- database:
id: &db "db"
client: *client
databaseName: *db
- collection:
id: &coll "coll"
database: *db
collectionName: *coll
initialData:
# Insert data encryption key:
- databaseName: keyvault
collectionName: datakeys
documents:
[
{
"_id": &keyid { "$binary": { "base64": "q83vqxI0mHYSNBI0VniQEg==", "subType": "04" } },
"keyMaterial":
{
"$binary":
{
"base64": "HBk9BWihXExNDvTp1lUxOuxuZK2Pe2ZdVdlsxPEBkiO1bS4mG5NNDsQ7zVxJAH8BtdOYp72Ku4Y3nwc0BUpIKsvAKX4eYXtlhv5zUQxWdeNFhg9qK7qb8nqhnnLeT0f25jFSqzWJoT379hfwDeu0bebJHr35QrJ8myZdPMTEDYF08QYQ48ShRBli0S+QzBHHAQiM2iJNr4svg2WR8JSeWQ==",
"subType": "00",
},
},
"creationDate": { "$date": { "$numberLong": "1648914851981" } },
"updateDate": { "$date": { "$numberLong": "1648914851981" } },
"status": { "$numberInt": "0" },
"masterKey": { "provider": "local" },
},
]
# Create encrypted collection:
- databaseName: *db
collectionName: *coll
documents: []
createOptions:
encryptedFields: &encryptedFields
{
"fields":
[
{
"keyId": *keyid,
"path": "encryptedText",
"bsonType": "string",
"queries": [
{
"queryType": "suffixPreview",
"contention": { "$numberLong": "0" },
"strMinQueryLength": { "$numberLong": "3" },
"strMaxQueryLength": { "$numberLong": "30" },
"caseSensitive": true,
"diacriticSensitive": true,
},
],
},
],
}
tests:
- description: "QE Text compactStructuredEncryptionData works"
operations:
- name: runCommand
object: *db
arguments:
command:
compactStructuredEncryptionData: *coll
commandName: compactStructuredEncryptionData
expectResult: { ok: 1 }
expectEvents:
- client: *client
events:
- commandStartedEvent:
command:
listCollections: 1
filter:
name: *coll
commandName: listCollections
- commandStartedEvent:
command:
find: datakeys
filter:
{
"$or":
[
"_id": { "$in": [ *keyid ] },
"keyAltNames": { "$in": [] },
],
}
$db: keyvault
readConcern: { level: "majority" }
commandName: find
- commandStartedEvent:
command:
compactStructuredEncryptionData: *coll
encryptionInformation:
type: { "$numberInt": "1" }
schema:
db.coll:
<<: *encryptedFields
# libmongocrypt applies strEncodeVersion, escCollection, and ecocCollection:
strEncodeVersion: { "$numberInt": "1" }
escCollection: "enxcol_.coll.esc"
ecocCollection: "enxcol_.coll.ecoc"
compactionTokens:
encryptedText:
ecoc:
{
"$binary":
{
"base64": "SWO8WEoZ2r2Kx/muQKb7+COizy85nIIUFiHh4K9kcvA=",
"subType": "00",
},
}
anchorPaddingToken:
{
"$binary":
{
"base64": "YAiF7Iwhqq1UyfxPvm70xfQJtrIRPrjfD2yRLG1+saQ=",
"subType": "00",
},
}
commandName: compactStructuredEncryptionData