Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified
📁 ..	-	2025-05-25 12:27
📄 addKeyAltName.json { "description": "addKeyAltName", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "add keyAltName to non-existent data key", "operations": [ { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "AAAjYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "new_key_alt_name" }, "expectResult": { "$$unsetOrMatches": null } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "AAAjYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "new_key_alt_name" } }, "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] }, { "description": "add new keyAltName to data key with no keyAltNames", "operations": [ { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "find", "object": "collection0", "arguments": { "filter": {}, "projection": { "_id": 0, "keyAltNames": 1 } }, "expectResult": [ { "keyAltNames": [ "local_key" ] } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "local_key" } }, "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "find" } } ] } ] }, { "description": "add existing keyAltName to existing data key", "operations": [ { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "find", "object": "collection0", "arguments": { "filter": {}, "projection": { "_id": 0, "keyAltNames": 1 } }, "expectResult": [ { "keyAltNames": [ "local_key" ] } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "local_key" } }, "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "local_key" } }, "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "find" } } ] } ] }, { "description": "add new keyAltName to data key with keyAltNames", "operations": [ { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "addKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "another_name" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "aggregate", "object": "collection0", "arguments": { "pipeline": [ { "$project": { "_id": 0, "keyAltNames": "$keyAltNames" } }, { "$unwind": "$keyAltNames" }, { "$sort": { "keyAltNames": 1 } } ] }, "expectResult": [ { "keyAltNames": "another_name" }, { "keyAltNames": "local_key" } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "local_key" } }, "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": { "$addToSet": { "keyAltNames": "another_name" } }, "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "aggregate" } } ] } ] } ] }	15.97 KB	2025-05-25 12:27
📄 addKeyAltName.yml description: addKeyAltName schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - &local_key_doc _id: &local_key_id { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: add keyAltName to non-existent data key operations: - name: addKeyAltName object: clientEncryption0 arguments: # First 3 letters of local_key_id replaced with 'A' (value: "#alkeylocalkey"). id: &non_existent_id { $binary: { base64: AAAjYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltName: new_key_alt_name expectResult: { $$unsetOrMatches: null } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: non_existent_id } update: { $addToSet: { keyAltNames: new_key_alt_name } } writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - local_key_doc - description: add new keyAltName to data key with no keyAltNames operations: - name: addKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: local_key expectResult: local_key_doc - name: find object: collection0 arguments: filter: {} projection: { _id: 0, keyAltNames: 1 } expectResult: - keyAltNames: [local_key] expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: { $addToSet: { keyAltNames: local_key } } writeConcern: { w: majority } - commandStartedEvent: { commandName: find } - description: add existing keyAltName to existing data key operations: - name: addKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: local_key expectResult: local_key_doc - name: addKeyAltName # Attempting to add a duplicate keyAltName to the data key should not be an error. object: clientEncryption0 arguments: id: local_key_id keyAltName: local_key expectResult: _id: local_key_id keyAltNames: [local_key] keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: 1 masterKey: provider: local - name: find object: collection0 arguments: filter: {} projection: { _id: 0, keyAltNames: 1 } expectResult: - keyAltNames: [local_key] expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: { $addToSet: { keyAltNames: local_key } } writeConcern: { w: majority } - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: { $addToSet: { keyAltNames: local_key } } writeConcern: { w: majority } - commandStartedEvent: { commandName: find } - description: add new keyAltName to data key with keyAltNames operations: - name: addKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: local_key expectResult: local_key_doc - name: addKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: another_name expectResult: _id: local_key_id keyAltNames: [local_key] keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: 1 masterKey: provider: local - name: aggregate object: collection0 arguments: pipeline: # Ensure keyAltNames are in deterministically sorted order. - $project: { _id: 0, keyAltNames: $keyAltNames } - $unwind: $keyAltNames - $sort: { keyAltNames: 1 } expectResult: - keyAltNames: another_name - keyAltNames: local_key expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: { $addToSet: { keyAltNames: local_key } } writeConcern: { w: majority } - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: *local_key_id } update: { $addToSet: { keyAltNames: another_name } } writeConcern: { w: majority } - commandStartedEvent: { commandName: aggregate }	6.53 KB	2025-05-25 12:27
📄 createDataKey-kms_providers-invalid.json { "description": "createDataKey-kms_providers-invalid", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent", "commandSucceededEvent", "commandFailedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "aws": { "accessKeyId": { "$$placeholder": 1 }, "secretAccessKey": { "$$placeholder": 1 } } } } } } ], "tests": [ { "description": "create data key without required master key fields", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "aws", "opts": { "masterKey": {} } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [] } ] }, { "description": "create data key with invalid master key field", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "masterKey": { "invalid": 1 } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [] } ] }, { "description": "create data key with invalid master key", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "aws", "opts": { "masterKey": { "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "invalid" } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [] } ] } ] }	2.57 KB	2025-05-25 12:27
📄 createDataKey-kms_providers-invalid.yml description: createDataKey-kms_providers-invalid schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - commandSucceededEvent - commandFailedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: aws: { accessKeyId: { $$placeholder: 1 }, secretAccessKey: { $$placeholder: 1 } } tests: - description: create data key without required master key fields operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: aws opts: masterKey: {} expectError: isClientError: true expectEvents: - client: client0 events: [] - description: create data key with invalid master key field operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: masterKey: invalid: 1 expectError: isClientError: true expectEvents: - client: client0 events: [] - description: create data key with invalid master key operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: aws opts: masterKey: key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: invalid expectError: isClientError: true expectEvents: - client: *client0 events: []	1.71 KB	2025-05-25 12:27
📄 createDataKey.json { "description": "createDataKey", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "aws": { "accessKeyId": { "$$placeholder": 1 }, "secretAccessKey": { "$$placeholder": 1 } }, "azure": { "tenantId": { "$$placeholder": 1 }, "clientId": { "$$placeholder": 1 }, "clientSecret": { "$$placeholder": 1 } }, "gcp": { "email": { "$$placeholder": 1 }, "privateKey": { "$$placeholder": 1 } }, "kmip": { "endpoint": { "$$placeholder": 1 } }, "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [] } ], "tests": [ { "description": "create data key with AWS KMS provider", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "aws", "opts": { "masterKey": { "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$exists": true }, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with Azure KMS provider", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "azure", "opts": { "masterKey": { "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" } } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$exists": true }, "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with GCP KMS provider", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "gcp", "opts": { "masterKey": { "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" } } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$exists": true }, "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with KMIP KMS provider", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "kmip" }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$exists": true }, "masterKey": { "provider": "kmip", "keyId": { "$$type": "string" } } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with local KMS provider", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local" }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$exists": true }, "masterKey": { "provider": "local" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with no keyAltName", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyAltNames": [] } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyAltNames": { "$$exists": false }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with single keyAltName", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyAltNames": [ "local_key" ] } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with multiple keyAltNames", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyAltNames": [ "abc", "def" ] } }, "expectResult": { "$$type": "binData" } }, { "name": "aggregate", "object": "collection0", "arguments": { "pipeline": [ { "$project": { "_id": 0, "keyAltNames": 1 } }, { "$unwind": "$keyAltNames" }, { "$sort": { "keyAltNames": 1 } } ] }, "expectResult": [ { "keyAltNames": "abc" }, { "keyAltNames": "def" } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyAltNames": { "$$type": "array" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ], "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "aggregate" } } ] } ] }, { "description": "create datakey with custom key material", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyMaterial": { "$binary": { "base64": "a2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFs", "subType": "00" } } } }, "expectResult": { "$$type": "binData" } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "insert": "datakeys", "documents": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "create datakey with invalid custom key material (too short)", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyMaterial": { "$binary": { "base64": "a2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFs", "subType": "00" } } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [] } ] } ] }	18.63 KB	2025-05-25 12:27
📄 createDataKey.yml description: createDataKey schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: aws: { accessKeyId: { $$placeholder: 1 }, secretAccessKey: { $$placeholder: 1 } } azure: { tenantId: { $$placeholder: 1 }, clientId: { $$placeholder: 1 }, clientSecret: { $$placeholder: 1 } } gcp: { email: { $$placeholder: 1 }, privateKey: { $$placeholder: 1 } } kmip: { endpoint: { $$placeholder: 1 } } local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: [] tests: - description: create data key with AWS KMS provider operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: aws opts: masterKey: &new_aws_masterkey key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-1 expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$exists: true } masterKey: provider: aws <<: new_aws_masterkey writeConcern: { w: majority } - description: create datakey with Azure KMS provider operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: azure opts: masterKey: &new_azure_masterkey keyVaultEndpoint: key-vault-csfle.vault.azure.net keyName: key-name-csfle expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$exists: true } masterKey: provider: azure <<: new_azure_masterkey writeConcern: { w: majority } - description: create datakey with GCP KMS provider operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: gcp opts: masterKey: &new_gcp_masterkey projectId: devprod-drivers location: global keyRing: key-ring-csfle keyName: key-name-csfle expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$exists: true } masterKey: provider: gcp <<: new_gcp_masterkey writeConcern: { w: majority } - description: create datakey with KMIP KMS provider operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: kmip expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$exists: true } masterKey: provider: kmip keyId: { $$type: string } writeConcern: { w: majority } - description: create datakey with local KMS provider operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$exists: true } masterKey: provider: local writeConcern: { w: majority } - description: create datakey with no keyAltName operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: keyAltNames: [] expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } # keyAltNames field should not exist if no keyAltNames are given. keyAltNames: { $$exists: false } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } writeConcern: { w: majority } - description: create datakey with single keyAltName operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: keyAltNames: ["local_key"] expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyAltNames: [local_key] keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } writeConcern: { w: majority } - description: create datakey with multiple keyAltNames operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: keyAltNames: ["abc", "def"] expectResult: { $$type: binData } - name: aggregate object: collection0 arguments: # Need to use pipeline to sort keyAltNames for deterministic matching # because keyAltNames is not required to be sorted. pipeline: - $project: { _id: 0, keyAltNames: 1 } - $unwind: $keyAltNames - $sort: { keyAltNames: 1 } expectResult: - keyAltNames: abc - keyAltNames: def expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } keyAltNames: { $$type: array } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } writeConcern: { w: majority } - commandStartedEvent: { commandName: aggregate } - description: create datakey with custom key material operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: # "key_material" repeated 8 times. keyMaterial: &custom_key_material { $binary: { base64: a2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFs, subType: "00" } } expectResult: { $$type: binData } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: insert: collection0Name documents: - _id: { $$type: binData } # Cannot match exact value of encrypted key material. keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } writeConcern: { w: majority } - description: create datakey with invalid custom key material (too short) operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: # "key_material" repeated only 7 times (key material length == 84). keyMaterial: { $binary: { base64: a2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFsa2V5X21hdGVyaWFs, subType: "00" } } expectError: isClientError: true expectEvents: - client: *client0 events: []	10.65 KB	2025-05-25 12:27
📄 deleteKey.json { "description": "deleteKey", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "delete non-existent data key", "operations": [ { "name": "deleteKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "AAAzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "deletedCount": 0 } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "delete": "datakeys", "deletes": [ { "q": { "_id": { "$binary": { "base64": "AAAzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "limit": 1 } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] }, { "description": "delete existing AWS data key", "operations": [ { "name": "deleteKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "deletedCount": 1 } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "delete": "datakeys", "deletes": [ { "q": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "limit": 1 } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] }, { "description": "delete existing local data key", "operations": [ { "name": "deleteKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "expectResult": { "deletedCount": 1 } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "delete": "datakeys", "deletes": [ { "q": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "limit": 1 } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } } ] } ] }, { "description": "delete existing data key twice", "operations": [ { "name": "deleteKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "deletedCount": 1 } }, { "name": "deleteKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "deletedCount": 0 } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "delete": "datakeys", "deletes": [ { "q": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "limit": 1 } ], "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "delete": "datakeys", "deletes": [ { "q": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "limit": 1 } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] } ] }	15.52 KB	2025-05-25 12:27
📄 deleteKey.yml description: deleteKey schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - &aws_key_doc _id: &aws_key_id { $binary: { base64: YXdzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } keyAltNames: ["aws_key"] keyMaterial: { $binary: { base64: AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: aws key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-1 - &local_key_doc _id: &local_key_id { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: ["local_key"] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: delete non-existent data key operations: - name: deleteKey object: clientEncryption0 arguments: # aws_key_id with first three letters replaced with 'A' (value: "3awsawsawsawsa"). id: &non_existent_id { $binary: { base64: AAAzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } expectResult: deletedCount: 0 expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: delete: collection0Name deletes: [{ q: { _id: non_existent_id }, limit: 1 }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - aws_key_doc - local_key_doc - description: delete existing AWS data key operations: - name: deleteKey object: clientEncryption0 arguments: id: aws_key_id expectResult: deletedCount: 1 expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: delete: collection0Name deletes: [{ q: { _id: aws_key_id }, limit: 1 }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - local_key_doc - description: delete existing local data key operations: - name: deleteKey object: clientEncryption0 arguments: id: local_key_id expectResult: deletedCount: 1 expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: delete: collection0Name deletes: [{ q: { _id: local_key_id }, limit: 1 }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - aws_key_doc - description: delete existing data key twice operations: - name: deleteKey object: clientEncryption0 arguments: id: aws_key_id expectResult: deletedCount: 1 - name: deleteKey object: clientEncryption0 arguments: id: aws_key_id expectResult: deletedCount: 0 expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: delete: collection0Name deletes: [{ q: { _id: aws_key_id }, limit: 1 }] writeConcern: { w: majority } - commandStartedEvent: databaseName: database0Name command: delete: collection0Name deletes: [{ q: { _id: aws_key_id }, limit: 1 }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - *local_key_doc	5.37 KB	2025-05-25 12:27
📄 getKey.json { "description": "getKey", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "get non-existent data key", "operations": [ { "name": "getKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "AAAzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "$$unsetOrMatches": null } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "_id": { "$binary": { "base64": "AAAzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "get existing AWS data key", "operations": [ { "name": "getKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "expectResult": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } } }, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "get existing local data key", "operations": [ { "name": "getKey", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "readConcern": { "level": "majority" } } } } ] } ] } ] }	8.52 KB	2025-05-25 12:27
📄 getKey.yml description: getKey schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - &aws_key_doc _id: &aws_key_id { $binary: { base64: YXdzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } keyAltNames: ["aws_key"] keyMaterial: { $binary: { base64: AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: aws key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-1 - &local_key_doc _id: &local_key_id { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: ["local_key"] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: get non-existent data key operations: - name: getKey object: clientEncryption0 arguments: # aws_key_id with first three letters replaced with 'A' (value: "3awsawsawsawsa"). id: &non_existent_id { $binary: { base64: AAAzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } expectResult: { $$unsetOrMatches: null } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { _id: non_existent_id } readConcern: { level: majority } - description: get existing AWS data key operations: - name: getKey object: clientEncryption0 arguments: id: aws_key_id expectResult: aws_key_doc expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { _id: aws_key_id } readConcern: { level: majority } - description: get existing local data key operations: - name: getKey object: clientEncryption0 arguments: id: local_key_id expectResult: local_key_doc expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { _id: *local_key_id } readConcern: { level: majority }	3.81 KB	2025-05-25 12:27
📄 getKeyByAltName.json { "description": "getKeyByAltName", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "get non-existent data key", "operations": [ { "name": "getKeyByAltName", "object": "clientEncryption0", "arguments": { "keyAltName": "does_not_exist" }, "expectResult": { "$$unsetOrMatches": null } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": "does_not_exist" }, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "get existing AWS data key", "operations": [ { "name": "getKeyByAltName", "object": "clientEncryption0", "arguments": { "keyAltName": "aws_key" }, "expectResult": { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": "aws_key" }, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "get existing local data key", "operations": [ { "name": "getKeyByAltName", "object": "clientEncryption0", "arguments": { "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": "local_key" }, "readConcern": { "level": "majority" } } } } ] } ] } ] }	7.71 KB	2025-05-25 12:27
📄 getKeyByAltName.yml description: getKeyByAltName schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - &aws_key_doc _id: { $binary: { base64: YXdzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } keyAltNames: ["aws_key"] keyMaterial: { $binary: { base64: AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: aws key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-1 - &local_key_doc _id: { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: ["local_key"] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: get non-existent data key operations: - name: getKeyByAltName object: clientEncryption0 arguments: keyAltName: does_not_exist expectResult: { $$unsetOrMatches: null } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: does_not_exist } readConcern: { level: majority } - description: get existing AWS data key operations: - name: getKeyByAltName object: clientEncryption0 arguments: keyAltName: aws_key expectResult: aws_key_doc expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: aws_key } readConcern: { level: majority } - description: get existing local data key operations: - name: getKeyByAltName object: clientEncryption0 arguments: keyAltName: local_key expectResult: local_key_doc expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: *collection0Name filter: { keyAltNames: local_key } readConcern: { level: majority }	3.69 KB	2025-05-25 12:27
📄 getKeys.json { "description": "getKeys", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [] } ], "tests": [ { "description": "getKeys with zero key documents", "operations": [ { "name": "getKeys", "object": "clientEncryption0", "expectResult": [] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "getKeys with single key documents", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local", "opts": { "keyAltNames": [ "abc" ] } }, "expectResult": { "$$type": "binData" } }, { "name": "getKeys", "object": "clientEncryption0", "expectResult": [ { "_id": { "$$type": "binData" }, "keyAltNames": [ "abc" ], "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "insert" } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "getKeys with many key documents", "operations": [ { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local" }, "expectResult": { "$$type": "binData" } }, { "name": "createDataKey", "object": "clientEncryption0", "arguments": { "kmsProvider": "local" }, "expectResult": { "$$type": "binData" } }, { "name": "getKeys", "object": "clientEncryption0", "expectResult": [ { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } }, { "_id": { "$$type": "binData" }, "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": { "$$type": "int" }, "masterKey": { "$$type": "object" } } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "insert" } }, { "commandStartedEvent": { "commandName": "insert" } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] } ] }	5.77 KB	2025-05-25 12:27
📄 getKeys.yml description: getKeys schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: [] tests: - description: getKeys with zero key documents operations: - name: getKeys object: clientEncryption0 expectResult: [] expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority } - description: getKeys with single key documents operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local opts: keyAltNames: ["abc"] expectResult: { $$type: binData } - name: getKeys object: clientEncryption0 expectResult: - _id: { $$type: binData } keyAltNames: ["abc"] keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } expectEvents: - client: client0 events: - commandStartedEvent: commandName: insert - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority } - description: getKeys with many key documents operations: - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local expectResult: { $$type: binData } - name: createDataKey object: clientEncryption0 arguments: kmsProvider: local expectResult: { $$type: binData } - name: getKeys object: clientEncryption0 expectResult: # Cannot expect deterministic order of results, so only assert that # exactly two key documents are returned. - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } - _id: { $$type: binData } keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: { $$type: int } masterKey: { $$type: object } expectEvents: - client: client0 events: - commandStartedEvent: commandName: insert - commandStartedEvent: commandName: insert - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority }	3.55 KB	2025-05-25 12:27
📄 removeKeyAltName.json { "description": "removeKeyAltName", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "remove keyAltName from non-existent data key", "operations": [ { "name": "removeKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "AAAjYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "does_not_exist" }, "expectResult": { "$$unsetOrMatches": null } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "AAAjYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": [ { "$set": { "keyAltNames": { "$cond": [ { "$eq": [ "$keyAltNames", [ "does_not_exist" ] ] }, "$$REMOVE", { "$filter": { "input": "$keyAltNames", "cond": { "$ne": [ "$$this", "does_not_exist" ] } } } ] } } } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] }, { "description": "remove non-existent keyAltName from existing data key", "operations": [ { "name": "removeKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "does_not_exist" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": [ { "$set": { "keyAltNames": { "$cond": [ { "$eq": [ "$keyAltNames", [ "does_not_exist" ] ] }, "$$REMOVE", { "$filter": { "input": "$keyAltNames", "cond": { "$ne": [ "$$this", "does_not_exist" ] } } } ] } } } ], "writeConcern": { "w": "majority" } } } } ] } ], "outcome": [ { "collectionName": "datakeys", "databaseName": "keyvault", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ] }, { "description": "remove an existing keyAltName from an existing data key", "operations": [ { "name": "removeKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "alternate_name" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "find", "object": "collection0", "arguments": { "filter": {}, "projection": { "_id": 0, "keyAltNames": 1 } }, "expectResult": [ { "keyAltNames": [ "local_key" ] } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": [ { "$set": { "keyAltNames": { "$cond": [ { "$eq": [ "$keyAltNames", [ "alternate_name" ] ] }, "$$REMOVE", { "$filter": { "input": "$keyAltNames", "cond": { "$ne": [ "$$this", "alternate_name" ] } } } ] } } } ], "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "find" } } ] } ] }, { "description": "remove the last keyAltName from an existing data key", "operations": [ { "name": "removeKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "alternate_name" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "alternate_name", "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } }, { "name": "removeKeyAltName", "object": "clientEncryption0", "arguments": { "id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltName": "local_key" }, "expectResult": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$$type": "binData" }, "creationDate": { "$$type": "date" }, "updateDate": { "$$type": "date" }, "status": 1, "masterKey": { "provider": "local" } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": [ { "$set": { "keyAltNames": { "$cond": [ { "$eq": [ "$keyAltNames", [ "alternate_name" ] ] }, "$$REMOVE", { "$filter": { "input": "$keyAltNames", "cond": { "$ne": [ "$$this", "alternate_name" ] } } } ] } } } ], "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "findAndModify": "datakeys", "query": { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } } }, "update": [ { "$set": { "keyAltNames": { "$cond": [ { "$eq": [ "$keyAltNames", [ "local_key" ] ] }, "$$REMOVE", { "$filter": { "input": "$keyAltNames", "cond": { "$ne": [ "$$this", "local_key" ] } } } ] } } } ] } } } ] } ] } ] }	19.15 KB	2025-05-25 12:27
📄 removeKeyAltName.yml description: removeKeyAltName schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - &local_key_doc _id: &local_key_id { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: [alternate_name, local_key] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: remove keyAltName from non-existent data key operations: - name: removeKeyAltName object: clientEncryption0 arguments: # First 3 letters of local_key_id replaced with 'A' (value: "#alkeylocalkey"). id: &non_existent_id { $binary: { base64: AAAjYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltName: does_not_exist expectResult: { $$unsetOrMatches: null } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: non_existent_id } update: [{ $set: { keyAltNames: { $cond: [{ $eq: [$keyAltNames, [does_not_exist]] }, $$REMOVE, { $filter: { input: $keyAltNames, cond: { $ne: [$$this, does_not_exist] } } }] } } }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - local_key_doc - description: remove non-existent keyAltName from existing data key operations: - name: removeKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: does_not_exist expectResult: local_key_doc expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: [{ $set: { keyAltNames: { $cond: [{ $eq: [$keyAltNames, [does_not_exist]] }, $$REMOVE, { $filter: { input: $keyAltNames, cond: { $ne: [$$this, does_not_exist] } } }] } } }] writeConcern: { w: majority } outcome: - collectionName: collection0Name databaseName: database0Name documents: - local_key_doc - description: remove an existing keyAltName from an existing data key operations: - name: removeKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: alternate_name expectResult: local_key_doc - name: find object: collection0 arguments: filter: {} projection: { _id: 0, keyAltNames: 1 } expectResult: - keyAltNames: [local_key] expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: [{ $set: { keyAltNames: { $cond: [{ $eq: [$keyAltNames, [alternate_name]] }, $$REMOVE, { $filter: { input: $keyAltNames, cond: { $ne: [$$this, alternate_name] } } }] } } }] writeConcern: { w: majority } - commandStartedEvent: { commandName: find } - description: remove the last keyAltName from an existing data key operations: - name: removeKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: alternate_name expectResult: local_key_doc - name: removeKeyAltName object: clientEncryption0 arguments: id: local_key_id keyAltName: local_key expectResult: _id: local_key_id keyAltNames: [local_key] keyMaterial: { $$type: binData } creationDate: { $$type: date } updateDate: { $$type: date } status: 1 masterKey: provider: local expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: [{ $set: { keyAltNames: { $cond: [{ $eq: [$keyAltNames, [alternate_name]] }, $$REMOVE, { $filter: { input: $keyAltNames, cond: { $ne: [$$this, alternate_name] } } }] } } }] writeConcern: { w: majority } - commandStartedEvent: databaseName: database0Name command: findAndModify: collection0Name query: { _id: local_key_id } update: [{ $set: { keyAltNames: { $cond: [{ $eq: [$keyAltNames, [local_key]] }, $$REMOVE, { $filter: { input: $keyAltNames, cond: { $ne: [$$this, local_key] } } }] } } }]	5.85 KB	2025-05-25 12:27
📄 rewrapManyDataKey-decrypt_failure.json { "description": "rewrapManyDataKey-decrypt_failure", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "aws": { "accessKeyId": { "$$placeholder": 1 }, "secretAccessKey": { "$$placeholder": 1 } }, "azure": { "tenantId": { "$$placeholder": 1 }, "clientId": { "$$placeholder": 1 }, "clientSecret": { "$$placeholder": 1 } }, "gcp": { "email": { "$$placeholder": 1 }, "privateKey": { "$$placeholder": 1 } }, "kmip": { "endpoint": { "$$placeholder": 1 } }, "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-2:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-2" } } ] } ], "tests": [ { "description": "rewrap data key that fails during decryption due to invalid masterKey", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": {}, "opts": { "provider": "local" } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "find", "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] } ] }	3.92 KB	2025-05-25 12:27
📄 rewrapManyDataKey-decrypt_failure.yml description: rewrapManyDataKey-decrypt_failure schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: aws: { accessKeyId: { $$placeholder: 1 }, secretAccessKey: { $$placeholder: 1 } } azure: { tenantId: { $$placeholder: 1 }, clientId: { $$placeholder: 1 }, clientSecret: { $$placeholder: 1 } } gcp: { email: { $$placeholder: 1 }, privateKey: { $$placeholder: 1 } } kmip: { endpoint: { $$placeholder: 1 } } local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - _id: { $binary: { base64: YXdzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } keyAltNames: ["aws_key"] keyMaterial: { $binary: { base64: AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: aws # "us-east-1" changed to "us-east-2" in both key and region. key: arn:aws:kms:us-east-2:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-2 tests: - description: "rewrap data key that fails during decryption due to invalid masterKey" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: {} opts: provider: local expectError: isClientError: true expectEvents: - client: client0 events: - commandStartedEvent: commandName: find databaseName: database0Name command: find: *collection0Name filter: {} readConcern: { level: majority }	2.58 KB	2025-05-25 12:27
📄 rewrapManyDataKey-encrypt_failure.json { "description": "rewrapManyDataKey-encrypt_failure", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "aws": { "accessKeyId": { "$$placeholder": 1 }, "secretAccessKey": { "$$placeholder": 1 } }, "azure": { "tenantId": { "$$placeholder": 1 }, "clientId": { "$$placeholder": 1 }, "clientSecret": { "$$placeholder": 1 } }, "gcp": { "email": { "$$placeholder": 1 }, "privateKey": { "$$placeholder": 1 } }, "kmip": { "endpoint": { "$$placeholder": 1 } }, "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "rewrap with invalid masterKey for AWS KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": {}, "opts": { "provider": "aws", "masterKey": { "key": "arn:aws:kms:us-east-2:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-2" } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "find", "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "rewrap with invalid masterKey for Azure KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": {}, "opts": { "provider": "azure", "masterKey": { "keyVaultEndpoint": "invalid-vault-csfle.vault.azure.net", "keyName": "invalid-name-csfle" } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "find", "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "rewrap with invalid masterKey for GCP KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": {}, "opts": { "provider": "gcp", "masterKey": { "projectId": "devprod-drivers", "location": "global", "keyRing": "invalid-ring-csfle", "keyName": "invalid-name-csfle" } } }, "expectError": { "isClientError": true } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "commandName": "find", "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } } ] } ] } ] }	6.02 KB	2025-05-25 12:27
📄 rewrapManyDataKey-encrypt_failure.yml description: rewrapManyDataKey-encrypt_failure schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: aws: { accessKeyId: { $$placeholder: 1 }, secretAccessKey: { $$placeholder: 1 } } azure: { tenantId: { $$placeholder: 1 }, clientId: { $$placeholder: 1 }, clientSecret: { $$placeholder: 1 } } gcp: { email: { $$placeholder: 1 }, privateKey: { $$placeholder: 1 } } kmip: { endpoint: { $$placeholder: 1 } } local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - _id: { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: ["local_key"] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: provider: local tests: - description: "rewrap with invalid masterKey for AWS KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: {} opts: provider: aws masterKey: # "us-east-1" changed to "us-east-2" in both key and region. key: arn:aws:kms:us-east-2:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-2 expectError: isClientError: true expectEvents: - client: client0 events: - commandStartedEvent: commandName: find databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority } - description: "rewrap with invalid masterKey for Azure KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: {} opts: provider: azure masterKey: # "key" changed to "invalid" in both keyVaultEndpoint and keyName. keyVaultEndpoint: invalid-vault-csfle.vault.azure.net keyName: invalid-name-csfle expectError: isClientError: true expectEvents: - client: client0 events: - commandStartedEvent: commandName: find databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority } - description: "rewrap with invalid masterKey for GCP KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: {} opts: provider: gcp masterKey: # "key" changed to "invalid" in both keyRing and keyName. projectId: devprod-drivers location: global keyRing: invalid-ring-csfle keyName: invalid-name-csfle expectError: isClientError: true expectEvents: - client: client0 events: - commandStartedEvent: commandName: find databaseName: database0Name command: find: *collection0Name filter: {} readConcern: { level: majority }	4.1 KB	2025-05-25 12:27
📄 rewrapManyDataKey.json { "description": "rewrapManyDataKey", "schemaVersion": "1.8", "runOnRequirements": [ { "csfle": true } ], "createEntities": [ { "client": { "id": "client0", "observeEvents": [ "commandStartedEvent" ] } }, { "clientEncryption": { "id": "clientEncryption0", "clientEncryptionOpts": { "keyVaultClient": "client0", "keyVaultNamespace": "keyvault.datakeys", "kmsProviders": { "aws": { "accessKeyId": { "$$placeholder": 1 }, "secretAccessKey": { "$$placeholder": 1 } }, "azure": { "tenantId": { "$$placeholder": 1 }, "clientId": { "$$placeholder": 1 }, "clientSecret": { "$$placeholder": 1 } }, "gcp": { "email": { "$$placeholder": 1 }, "privateKey": { "$$placeholder": 1 } }, "kmip": { "endpoint": { "$$placeholder": 1 } }, "local": { "key": { "$$placeholder": 1 } } } } } }, { "database": { "id": "database0", "client": "client0", "databaseName": "keyvault" } }, { "collection": { "id": "collection0", "database": "database0", "collectionName": "datakeys" } } ], "initialData": [ { "databaseName": "keyvault", "collectionName": "datakeys", "documents": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "keyAltNames": [ "aws_key" ], "keyMaterial": { "$binary": { "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "YXp1cmVhenVyZWF6dXJlYQ==", "subType": "04" } }, "keyAltNames": [ "azure_key" ], "keyMaterial": { "$binary": { "base64": "pr01l7qDygUkFE/0peFwpnNlv3iIy8zrQK38Q9i12UCN2jwZHDmfyx8wokiIKMb9kAleeY+vnt3Cf1MKu9kcDmI+KxbNDd+V3ytAAGzOVLDJr77CiWjF9f8ntkXRHrAY9WwnVDANYkDwXlyU0Y2GQFTiW65jiQhUtYLYH63Tk48SsJuQvnWw1Q+PzY8ga+QeVec8wbcThwtm+r2IHsCFnc72Gv73qq7weISw+O4mN08z3wOp5FOS2ZM3MK7tBGmPdBcktW7F8ODGsOQ1FU53OrWUnyX2aTi2ftFFFMWVHqQo7EYuBZHru8RRODNKMyQk0BFfKovAeTAVRv9WH9QU7g==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" } }, { "_id": { "$binary": { "base64": "Z2NwZ2NwZ2NwZ2NwZ2NwZw==", "subType": "04" } }, "keyAltNames": [ "gcp_key" ], "keyMaterial": { "$binary": { "base64": "CiQAIgLj0USbQtof/pYRLQO96yg/JEtZbD1UxKueaC37yzT5tTkSiQEAhClWB5ZCSgzHgxv8raWjNB4r7e8ePGdsmSuYTYmLC5oHHS/BdQisConzNKFaobEQZHamTCjyhy5NotKF8MWoo+dyfQApwI29+vAGyrUIQCXzKwRnNdNQ+lb3vJtS5bqvLTvSxKHpVca2kqyC9nhonV+u4qru5Q2bAqUgVFc8fL4pBuvlowZFTQ==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" } }, { "_id": { "$binary": { "base64": "a21pcGttaXBrbWlwa21pcA==", "subType": "04" } }, "keyAltNames": [ "kmip_key" ], "keyMaterial": { "$binary": { "base64": "CklVctHzke4mcytd0TxGqvepkdkQN8NUF4+jV7aZQITAKdz6WjdDpq3lMt9nSzWGG2vAEfvRb3mFEVjV57qqGqxjq2751gmiMRHXz0btStbIK3mQ5xbY9kdye4tsixlCryEwQONr96gwlwKKI9Nubl9/8+uRF6tgYjje7Q7OjauEf1SrJwKcoQ3WwnjZmEqAug0kImCpJ/irhdqPzivRiA==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "kmip", "keyId": "1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "keyAltNames": [ "local_key" ], "keyMaterial": { "$binary": { "base64": "ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==", "subType": "00" } }, "creationDate": { "$date": { "$numberLong": "1641024000000" } }, "updateDate": { "$date": { "$numberLong": "1641024000000" } }, "status": 1, "masterKey": { "provider": "local" } } ] } ], "tests": [ { "description": "no keys to rewrap due to no filter matches", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": "no_matching_keys" }, "opts": { "provider": "local" } }, "expectResult": { "bulkWriteResult": { "$$exists": false } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": "no_matching_keys" }, "readConcern": { "level": "majority" } } } } ] } ] }, { "description": "rewrap with new AWS KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": { "$ne": "aws_key" } }, "opts": { "provider": "aws", "masterKey": { "key": "arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d", "region": "us-east-1" } } }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 4, "modifiedCount": 4, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": { "$ne": "aws_key" } }, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d", "region": "us-east-1" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d", "region": "us-east-1" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d", "region": "us-east-1" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d", "region": "us-east-1" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "rewrap with new Azure KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": { "$ne": "azure_key" } }, "opts": { "provider": "azure", "masterKey": { "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" } } }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 4, "modifiedCount": 4, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": { "$ne": "azure_key" } }, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "rewrap with new GCP KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": { "$ne": "gcp_key" } }, "opts": { "provider": "gcp", "masterKey": { "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" } } }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 4, "modifiedCount": 4, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": { "$ne": "gcp_key" } }, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "rewrap with new KMIP KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": { "$ne": "kmip_key" } }, "opts": { "provider": "kmip" } }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 4, "modifiedCount": 4, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": { "$ne": "kmip_key" } }, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "kmip", "keyId": { "$$type": "string" } }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "kmip", "keyId": { "$$type": "string" } }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "kmip", "keyId": { "$$type": "string" } }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "kmip", "keyId": { "$$type": "string" } }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "rewrap with new local KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": { "keyAltNames": { "$ne": "local_key" } }, "opts": { "provider": "local" } }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 4, "modifiedCount": 4, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": { "keyAltNames": { "$ne": "local_key" } }, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "local" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "local" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "local" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "provider": "local" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } } ] } ] }, { "description": "rewrap with current KMS provider", "operations": [ { "name": "rewrapManyDataKey", "object": "clientEncryption0", "arguments": { "filter": {} }, "expectResult": { "bulkWriteResult": { "insertedCount": 0, "matchedCount": 5, "modifiedCount": 5, "deletedCount": 0, "upsertedCount": 0, "upsertedIds": {}, "insertedIds": { "$$unsetOrMatches": {} } } } }, { "name": "find", "object": "collection0", "arguments": { "filter": {}, "projection": { "masterKey": 1 }, "sort": { "keyAltNames": 1 } }, "expectResult": [ { "_id": { "$binary": { "base64": "YXdzYXdzYXdzYXdzYXdzYQ==", "subType": "04" } }, "masterKey": { "provider": "aws", "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "region": "us-east-1" } }, { "_id": { "$binary": { "base64": "YXp1cmVhenVyZWF6dXJlYQ==", "subType": "04" } }, "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" } }, { "_id": { "$binary": { "base64": "Z2NwZ2NwZ2NwZ2NwZ2NwZw==", "subType": "04" } }, "masterKey": { "provider": "gcp", "projectId": "devprod-drivers", "location": "global", "keyRing": "key-ring-csfle", "keyName": "key-name-csfle" } }, { "_id": { "$binary": { "base64": "a21pcGttaXBrbWlwa21pcA==", "subType": "04" } }, "masterKey": { "provider": "kmip", "keyId": "1" } }, { "_id": { "$binary": { "base64": "bG9jYWxrZXlsb2NhbGtleQ==", "subType": "04" } }, "masterKey": { "provider": "local" } } ] } ], "expectEvents": [ { "client": "client0", "events": [ { "commandStartedEvent": { "databaseName": "keyvault", "command": { "find": "datakeys", "filter": {}, "readConcern": { "level": "majority" } } } }, { "commandStartedEvent": { "databaseName": "keyvault", "command": { "update": "datakeys", "ordered": true, "updates": [ { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "$$type": "object" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "$$type": "object" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "$$type": "object" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "$$type": "object" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } }, { "q": { "_id": { "$$type": "binData" } }, "u": { "$set": { "masterKey": { "$$type": "object" }, "keyMaterial": { "$$type": "binData" } }, "$currentDate": { "updateDate": true } }, "multi": { "$$unsetOrMatches": false }, "upsert": { "$$unsetOrMatches": false } } ], "writeConcern": { "w": "majority" } } } }, { "commandStartedEvent": { "commandName": "find" } } ] } ] } ] }	45.11 KB	2025-05-25 12:27
📄 rewrapManyDataKey.yml # To ensure consistent ordering for expectResult matching purposes, find # commands sort the resulting documents in ascending order by the single-element # keyAltNames array to ensure alphabetic order by original KMS provider as # defined in initialData. description: rewrapManyDataKey schemaVersion: "1.8" runOnRequirements: - csfle: true createEntities: - client: id: &client0 client0 observeEvents: - commandStartedEvent - clientEncryption: id: &clientEncryption0 clientEncryption0 clientEncryptionOpts: keyVaultClient: client0 keyVaultNamespace: keyvault.datakeys kmsProviders: aws: { accessKeyId: { $$placeholder: 1 }, secretAccessKey: { $$placeholder: 1 } } azure: { tenantId: { $$placeholder: 1 }, clientId: { $$placeholder: 1 }, clientSecret: { $$placeholder: 1 } } gcp: { email: { $$placeholder: 1 }, privateKey: { $$placeholder: 1 } } kmip: { endpoint: { $$placeholder: 1 } } local: { key: { $$placeholder: 1 } } - database: id: &database0 database0 client: client0 databaseName: &database0Name keyvault - collection: id: &collection0 collection0 database: database0 collectionName: &collection0Name datakeys initialData: - databaseName: database0Name collectionName: collection0Name documents: - _id: &aws_key_id { $binary: { base64: YXdzYXdzYXdzYXdzYXdzYQ==, subType: "04" } } keyAltNames: ["aws_key"] keyMaterial: { $binary: { base64: AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gFXJqbF0Fy872MD7xl56D/2AAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDO7HPisPUlGzaio9vgIBEIB7/Qow46PMh/8JbEUbdXgTGhLfXPE+KIVW7T8s6YEMlGiRvMu7TV0QCIUJlSHPKZxzlJ2iwuz5yXeOag+EdY+eIQ0RKrsJ3b8UTisZYzGjfzZnxUKLzLoeXremtRCm3x47wCuHKd1dhh6FBbYt5TL2tDaj+vL2GBrKat2L, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: &aws_masterkey provider: aws key: arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0 region: us-east-1 - _id: &azure_key_id { $binary: { base64: YXp1cmVhenVyZWF6dXJlYQ==, subType: "04" } } keyAltNames: ["azure_key"] keyMaterial: { $binary: { base64: pr01l7qDygUkFE/0peFwpnNlv3iIy8zrQK38Q9i12UCN2jwZHDmfyx8wokiIKMb9kAleeY+vnt3Cf1MKu9kcDmI+KxbNDd+V3ytAAGzOVLDJr77CiWjF9f8ntkXRHrAY9WwnVDANYkDwXlyU0Y2GQFTiW65jiQhUtYLYH63Tk48SsJuQvnWw1Q+PzY8ga+QeVec8wbcThwtm+r2IHsCFnc72Gv73qq7weISw+O4mN08z3wOp5FOS2ZM3MK7tBGmPdBcktW7F8ODGsOQ1FU53OrWUnyX2aTi2ftFFFMWVHqQo7EYuBZHru8RRODNKMyQk0BFfKovAeTAVRv9WH9QU7g==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: &azure_masterkey provider: azure keyVaultEndpoint: key-vault-csfle.vault.azure.net keyName: key-name-csfle - _id: &gcp_key_id { $binary: { base64: Z2NwZ2NwZ2NwZ2NwZ2NwZw==, subType: "04" } } keyAltNames: ["gcp_key"] keyMaterial: { $binary: { base64: CiQAIgLj0USbQtof/pYRLQO96yg/JEtZbD1UxKueaC37yzT5tTkSiQEAhClWB5ZCSgzHgxv8raWjNB4r7e8ePGdsmSuYTYmLC5oHHS/BdQisConzNKFaobEQZHamTCjyhy5NotKF8MWoo+dyfQApwI29+vAGyrUIQCXzKwRnNdNQ+lb3vJtS5bqvLTvSxKHpVca2kqyC9nhonV+u4qru5Q2bAqUgVFc8fL4pBuvlowZFTQ==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: &gcp_masterkey provider: gcp projectId: devprod-drivers location: global keyRing: key-ring-csfle keyName: key-name-csfle - _id: &kmip_key_id { $binary: { base64: a21pcGttaXBrbWlwa21pcA==, subType: "04" } } keyAltNames: ["kmip_key"] keyMaterial: { $binary: { base64: CklVctHzke4mcytd0TxGqvepkdkQN8NUF4+jV7aZQITAKdz6WjdDpq3lMt9nSzWGG2vAEfvRb3mFEVjV57qqGqxjq2751gmiMRHXz0btStbIK3mQ5xbY9kdye4tsixlCryEwQONr96gwlwKKI9Nubl9/8+uRF6tgYjje7Q7OjauEf1SrJwKcoQ3WwnjZmEqAug0kImCpJ/irhdqPzivRiA==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: &kmip_masterkey provider: kmip keyId: "1" - _id: &local_key_id { $binary: { base64: bG9jYWxrZXlsb2NhbGtleQ==, subType: "04" } } keyAltNames: ["local_key"] keyMaterial: { $binary: { base64: ABKBldDEoDW323yejOnIRk6YQmlD9d3eQthd16scKL75nz2LjNL9fgPDZWrFFOlqlhMCFaSrNJfGrFUjYk5JFDO7soG5Syb50k1niJoKg4ilsj0L4mpimFUtTpOr2nzZOeQtvAksEXc7gsFgq8gV7t/U3lsaXPY7I0t42DfSE8EGlPdxRjFdHnxh+OR8h7U9b8Qs5K5UuhgyeyxaBZ1Hgw==, subType: "00" } } creationDate: { $date: { $numberLong: "1641024000000" } } updateDate: { $date: { $numberLong: "1641024000000" } } status: 1 masterKey: &local_masterkey provider: local tests: - description: "no keys to rewrap due to no filter matches" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: no_matching_keys } opts: provider: local expectResult: # If no bulk write operation, then no bulk write result. bulkWriteResult: { $$exists: false } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: no_matching_keys } readConcern: { level: majority } - description: "rewrap with new AWS KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: { $ne: aws_key } } opts: provider: aws # Different key: 89fcc2c4-08b0-4bd9-9f25-e30687b580d0 -> 061334ae-07a8-4ceb-a813-8135540e837d. masterKey: &new_aws_masterkey key: arn:aws:kms:us-east-1:579766882180:key/061334ae-07a8-4ceb-a813-8135540e837d region: us-east-1 expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 4 modifiedCount: 4 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: { $ne: aws_key } } readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: aws, <<: new_aws_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: aws, <<: new_aws_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: aws, <<: new_aws_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: aws, <<: new_aws_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - description: "rewrap with new Azure KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: { $ne: azure_key } } opts: provider: azure masterKey: &new_azure_masterkey keyVaultEndpoint: key-vault-csfle.vault.azure.net keyName: key-name-csfle expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 4 modifiedCount: 4 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: { $ne: azure_key } } readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: azure, <<: new_azure_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: azure, <<: new_azure_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: azure, <<: new_azure_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: azure, <<: new_azure_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - description: "rewrap with new GCP KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: { $ne: gcp_key } } opts: provider: gcp masterKey: &new_gcp_masterkey projectId: devprod-drivers location: global keyRing: key-ring-csfle keyName: key-name-csfle expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 4 modifiedCount: 4 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: { $ne: gcp_key } } readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: gcp, <<: new_gcp_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: gcp, <<: new_gcp_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: gcp, <<: new_gcp_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: gcp, <<: new_gcp_masterkey }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - description: "rewrap with new KMIP KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: { $ne: kmip_key } } opts: provider: kmip expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 4 modifiedCount: 4 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: { $ne: kmip_key } } readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: kmip, keyId: { $$type: string } }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: kmip, keyId: { $$type: string } }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: kmip, keyId: { $$type: string } }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: kmip, keyId: { $$type: string } }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - description: "rewrap with new local KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: { keyAltNames: { $ne: local_key } } opts: provider: local expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 4 modifiedCount: 4 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: { keyAltNames: { $ne: local_key } } readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: local }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: local }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: local }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { provider: local }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - description: "rewrap with current KMS provider" operations: - name: rewrapManyDataKey object: clientEncryption0 arguments: filter: {} expectResult: bulkWriteResult: insertedCount: 0 matchedCount: 5 modifiedCount: 5 deletedCount: 0 upsertedCount: 0 upsertedIds: {} insertedIds: { $$unsetOrMatches: {} } - name: find object: collection0 arguments: filter: {} projection: { masterKey: 1 } sort: { keyAltNames: 1 } expectResult: - { _id: aws_key_id, masterKey: aws_masterkey } - { _id: azure_key_id, masterKey: azure_masterkey } - { _id: gcp_key_id, masterKey: gcp_masterkey } - { _id: kmip_key_id, masterKey: kmip_masterkey } - { _id: local_key_id, masterKey: local_masterkey } expectEvents: - client: client0 events: - commandStartedEvent: databaseName: database0Name command: find: collection0Name filter: {} readConcern: { level: majority } - commandStartedEvent: databaseName: database0Name command: update: collection0Name ordered: true updates: - q: { _id: { $$type: binData } } u: { $set: { masterKey: { $$type: object }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { $$type: object }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { $$type: object }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { $$type: object }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } - q: { _id: { $$type: binData } } u: { $set: { masterKey: { $$type: object }, keyMaterial: { $$type: binData } }, $currentDate: { updateDate: true } } multi: { $$unsetOrMatches: false } upsert: { $$unsetOrMatches: false } writeConcern: { w: majority } - commandStartedEvent: { commandName: find }	20.65 KB	2025-05-25 12:27

Edit File:

Terminal