1*e7b1675dSTing-Kang Changload("@rules_python//python:defs.bzl", "py_binary") 2*e7b1675dSTing-Kang Changload("@pip_deps//:requirements.bzl", "requirement") 3*e7b1675dSTing-Kang Chang 4*e7b1675dSTing-Kang Changpackage(default_visibility = ["//visibility:private"]) 5*e7b1675dSTing-Kang Chang 6*e7b1675dSTing-Kang Changlicenses(["notice"]) 7*e7b1675dSTing-Kang Chang 8*e7b1675dSTing-Kang Changpy_binary( 9*e7b1675dSTing-Kang Chang name = "encrypted_keyset", 10*e7b1675dSTing-Kang Chang srcs = ["encrypted_keyset.py"], 11*e7b1675dSTing-Kang Chang python_version = "PY3", 12*e7b1675dSTing-Kang Chang deps = [ 13*e7b1675dSTing-Kang Chang requirement("absl-py"), 14*e7b1675dSTing-Kang Chang "@tink_py//tink:tink_python", 15*e7b1675dSTing-Kang Chang "@tink_py//tink/aead", 16*e7b1675dSTing-Kang Chang "@tink_py//tink/integration/gcpkms", 17*e7b1675dSTing-Kang Chang ], 18*e7b1675dSTing-Kang Chang) 19*e7b1675dSTing-Kang Chang 20*e7b1675dSTing-Kang Chang# In order to run this test, you'd have to use your own Cloud KMS key and credential. 21*e7b1675dSTing-Kang Changsh_test( 22*e7b1675dSTing-Kang Chang name = "encrypted_keyset_test", 23*e7b1675dSTing-Kang Chang size = "small", 24*e7b1675dSTing-Kang Chang srcs = ["encrypted_keyset_test.sh"], 25*e7b1675dSTing-Kang Chang args = [ 26*e7b1675dSTing-Kang Chang "$(rootpath :encrypted_keyset)", 27*e7b1675dSTing-Kang Chang # Change this to your key. 28*e7b1675dSTing-Kang Chang "gcp-kms://projects/tink-test-infrastructure/locations/global/keyRings/unit-and-integration-testing/cryptoKeys/aead-key", 29*e7b1675dSTing-Kang Chang # Change this to your credential. 30*e7b1675dSTing-Kang Chang "$(rootpath //testdata/gcp:credential.json)", 31*e7b1675dSTing-Kang Chang ], 32*e7b1675dSTing-Kang Chang data = [ 33*e7b1675dSTing-Kang Chang ":encrypted_keyset", 34*e7b1675dSTing-Kang Chang "@google_root_pem//file", 35*e7b1675dSTing-Kang Chang # Change this to your credential. 36*e7b1675dSTing-Kang Chang "//testdata/gcp:credential.json", 37*e7b1675dSTing-Kang Chang ], 38*e7b1675dSTing-Kang Chang tags = ["manual"], 39*e7b1675dSTing-Kang Chang) 40*e7b1675dSTing-Kang Chang 41*e7b1675dSTing-Kang Chang# This runs the previous test, assuming the Tink python package has been 42*e7b1675dSTing-Kang Chang# installed previously with pip3 install. 43*e7b1675dSTing-Kang Changsh_test( 44*e7b1675dSTing-Kang Chang name = "encrypted_keyset_test_package", 45*e7b1675dSTing-Kang Chang size = "small", 46*e7b1675dSTing-Kang Chang srcs = ["encrypted_keyset_test.sh"], 47*e7b1675dSTing-Kang Chang args = [ 48*e7b1675dSTing-Kang Chang "'python3 $(rootpath :encrypted_keyset.py)'", 49*e7b1675dSTing-Kang Chang # Change this to your key. 50*e7b1675dSTing-Kang Chang "gcp-kms://projects/tink-test-infrastructure/locations/global/keyRings/unit-and-integration-testing/cryptoKeys/aead-key", 51*e7b1675dSTing-Kang Chang # Change this to your credential. 52*e7b1675dSTing-Kang Chang "$(rootpath //testdata/gcp:credential.json)", 53*e7b1675dSTing-Kang Chang ], 54*e7b1675dSTing-Kang Chang data = [ 55*e7b1675dSTing-Kang Chang ":encrypted_keyset.py", 56*e7b1675dSTing-Kang Chang "@google_root_pem//file", 57*e7b1675dSTing-Kang Chang # Change this to your credential. 58*e7b1675dSTing-Kang Chang "//testdata/gcp:credential.json", 59*e7b1675dSTing-Kang Chang ], 60*e7b1675dSTing-Kang Chang tags = ["manual"], 61*e7b1675dSTing-Kang Chang) 62