feat: e2e for vault with ibm power

Signed-off-by: Rajakumar Battula <rbattula@redhat.com>

Author: raja-0940

test/e2e/e2e_test.go

@@ -759,20 +759,20 @@ var _ = Describe("External Secrets Operator End-to-End test scenarios", Ordered,
 
 		AfterAll(func() {
 			By("Cleaning up Vault namespace")
-			safeDelete(exec.Command(
-				"oc", "delete",
+			safeDelete(ctx,
+				"delete",
 				"namespace", vaultNamespace,
 				"--ignore-not-found",
 				"--wait=true",
-			))
+			)
 
 			By("Cleaning up NetworkPolicy")
-			safeDelete(exec.Command(
-				"oc", "delete",
+			safeDelete(ctx,
+				"delete",
 				"networkpolicy", "allow-to-vault-test",
 				"-n", "external-secrets",
 				"--ignore-not-found",
-			))
+			)
 		})
 
 		It("should create secret mentioned in ExternalSecret using the referenced SecretStore", func() {
@@ -917,10 +917,10 @@ func setupVault(ctx context.Context, client *kubernetes.Clientset) (string, erro
 
 	initOut, err := utils.Run(initCmd)
 	if err != nil {
-		return "", fmt.Errorf("vault init failed: %w\n%s", err, string(initOut))
+		return "", fmt.Errorf("vault init failed: %w", err)
 	}
 
-	By(fmt.Sprintf("Vault init output:\n%s", string(initOut)))
+	By("Vault initialized successfully")
 
 	// Step 2: Extract keys
 	lines := strings.Split(string(initOut), "\n")
@@ -1062,7 +1062,12 @@ func createVaultTokenSecret(ctx context.Context, client *kubernetes.Clientset, t
 	return err
 }
 
-func safeDelete(cmd *exec.Cmd) {
+func safeDelete(ctx context.Context, args ...string) {
+	ctxTimeout, cancel := context.WithTimeout(ctx, 2*time.Minute)
+	defer cancel()
+
+	cmd := exec.CommandContext(ctxTimeout, "oc", args...)
+
 	out, err := cmd.CombinedOutput()
 	if err != nil {
 		By(fmt.Sprintf("Cleanup error: %s", string(out)))

test/e2e/testdata/vault/vault.yaml

@@ -1,115 +1,115 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: vault-test
-
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: vault
-  namespace: vault-test
-
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: vault-config
-  namespace: vault-test
-data:
-  vault.hcl: |
-    ui = true
-
-    listener "tcp" {
-      address     = "0.0.0.0:8200"
-      tls_disable = 1
-    }
-
-    storage "file" {
-      path = "/vault/data"
-    }
-
-    disable_mlock = true
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: vault
-  namespace: vault-test
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: vault
-  template:
-    metadata:
-      labels:
-        app: vault
-    spec:
-      serviceAccountName: vault
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      containers:
-        - name: vault
-          image: icr.io/ppc64le-oss/vault-ppc64le:v1.14.8
-          command:
-            - vault
-          args:
-            - server
-            - -config=/vault/config/vault.hcl
-          env:
-            - name: VAULT_API_ADDR
-              value: http://vault.vault-test.svc.cluster.local:8200
-            - name: VAULT_ADDR
-              value: http://127.0.0.1:8200
-          ports:
-            - containerPort: 8200
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-          resources:
-            requests:
-              cpu: 100m
-              memory: 256Mi
-            limits:
-              cpu: 500m
-              memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /vault/config
-            - name: data
-              mountPath: /vault/data
-          readinessProbe:
-            httpGet:
-              path: /v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204
-              port: 8200
-            initialDelaySeconds: 20
-            periodSeconds: 5
-            timeoutSeconds: 5
-            failureThreshold: 10
-      volumes:
-        - name: config
-          configMap:
-            name: vault-config
-        - name: data
-          emptyDir: {}
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: vault
-  namespace: vault-test
-spec:
-  selector:
-    app: vault
-  ports:
-    - name: http
-      port: 8200
-      targetPort: 8200
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vault-test
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: vault
+  namespace: vault-test
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vault-config
+  namespace: vault-test
+data:
+  vault.hcl: |
+    ui = true
+
+    listener "tcp" {
+      address     = "0.0.0.0:8200"
+      tls_disable = 1
+    }
+
+    storage "file" {
+      path = "/vault/data"
+    }
+
+    disable_mlock = true
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vault
+  namespace: vault-test
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: vault
+  template:
+    metadata:
+      labels:
+        app: vault
+    spec:
+      serviceAccountName: vault
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: vault
+          image: icr.io/ppc64le-oss/vault-ppc64le:v1.14.8
+          command:
+            - vault
+          args:
+            - server
+            - -config=/vault/config/vault.hcl
+          env:
+            - name: VAULT_API_ADDR
+              value: http://vault.vault-test.svc.cluster.local:8200
+            - name: VAULT_ADDR
+              value: http://127.0.0.1:8200
+          ports:
+            - containerPort: 8200
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          volumeMounts:
+            - name: config
+              mountPath: /vault/config
+            - name: data
+              mountPath: /vault/data
+          readinessProbe:
+            httpGet:
+              path: /v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204
+              port: 8200
+            initialDelaySeconds: 20
+            periodSeconds: 5
+            timeoutSeconds: 5
+            failureThreshold: 10
+      volumes:
+        - name: config
+          configMap:
+            name: vault-config
+        - name: data
+          emptyDir: {}
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: vault
+  namespace: vault-test
+spec:
+  selector:
+    app: vault
+  ports:
+    - name: http
+      port: 8200
+      targetPort: 8200