SecretsManager: Add encrypted value store (#106607)

* SecretsManager: add encrypted value store

Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com>
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com>

* SecretsManager: wiring of encrypted value store

---------

Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com>

pkg/storage/secret/encryption/testdata/mysql--encrypted_value_create-create.sql

@@ -0,0 +1,13 @@
+INSERT INTO `secret_encrypted_value` (
+  `uid`,
+  `namespace`,
+  `encrypted_data`,
+  `created`,
+  `updated`
+) VALUES (
+  'abc123',
+  'ns',
+  '[115 101 99 114 101 116]',
+  1234,
+  5678
+);

pkg/storage/secret/encryption/testdata/mysql--encrypted_value_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM `secret_encrypted_value`
+WHERE `namespace` = 'ns' AND
+  `uid`      = 'abc123'
+;

pkg/storage/secret/encryption/testdata/mysql--encrypted_value_read-read.sql

@@ -0,0 +1,11 @@
+SELECT
+  `uid`,
+  `namespace`,
+  `encrypted_data`,
+  `created`,
+  `updated`
+FROM
+  `secret_encrypted_value`
+WHERE `namespace` = 'ns' AND
+  `uid` = 'abc123'
+;

pkg/storage/secret/encryption/testdata/mysql--encrypted_value_update-update.sql

@@ -0,0 +1,8 @@
+UPDATE
+  `secret_encrypted_value`
+SET
+  `encrypted_data` = '[115 101 99 114 101 116]',
+  `updated` = 5679
+WHERE `namespace` = 'ns' AND
+  `uid` = 'abc123'
+;

pkg/storage/secret/encryption/testdata/postgres--encrypted_value_create-create.sql

@@ -0,0 +1,13 @@
+INSERT INTO "secret_encrypted_value" (
+  "uid",
+  "namespace",
+  "encrypted_data",
+  "created",
+  "updated"
+) VALUES (
+  'abc123',
+  'ns',
+  '[115 101 99 114 101 116]',
+  1234,
+  5678
+);

pkg/storage/secret/encryption/testdata/postgres--encrypted_value_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM "secret_encrypted_value"
+WHERE "namespace" = 'ns' AND
+  "uid"      = 'abc123'
+;

pkg/storage/secret/encryption/testdata/postgres--encrypted_value_read-read.sql

@@ -0,0 +1,11 @@
+SELECT
+  "uid",
+  "namespace",
+  "encrypted_data",
+  "created",
+  "updated"
+FROM
+  "secret_encrypted_value"
+WHERE "namespace" = 'ns' AND
+  "uid" = 'abc123'
+;

pkg/storage/secret/encryption/testdata/postgres--encrypted_value_update-update.sql

@@ -0,0 +1,8 @@
+UPDATE
+  "secret_encrypted_value"
+SET
+  "encrypted_data" = '[115 101 99 114 101 116]',
+  "updated" = 5679
+WHERE "namespace" = 'ns' AND
+  "uid" = 'abc123'
+;

pkg/storage/secret/encryption/testdata/sqlite--encrypted_value_create-create.sql

@@ -0,0 +1,13 @@
+INSERT INTO "secret_encrypted_value" (
+  "uid",
+  "namespace",
+  "encrypted_data",
+  "created",
+  "updated"
+) VALUES (
+  'abc123',
+  'ns',
+  '[115 101 99 114 101 116]',
+  1234,
+  5678
+);

pkg/storage/secret/encryption/testdata/sqlite--encrypted_value_delete-delete.sql

@@ -0,0 +1,4 @@
+DELETE FROM "secret_encrypted_value"
+WHERE "namespace" = 'ns' AND
+  "uid"      = 'abc123'
+;

pkg/storage/secret/encryption/testdata/sqlite--encrypted_value_read-read.sql

@@ -0,0 +1,11 @@
+SELECT
+  "uid",
+  "namespace",
+  "encrypted_data",
+  "created",
+  "updated"
+FROM
+  "secret_encrypted_value"
+WHERE "namespace" = 'ns' AND
+  "uid" = 'abc123'
+;

pkg/storage/secret/encryption/testdata/sqlite--encrypted_value_update-update.sql

@@ -0,0 +1,8 @@
+UPDATE
+  "secret_encrypted_value"
+SET
+  "encrypted_data" = '[115 101 99 114 101 116]',
+  "updated" = 5679
+WHERE "namespace" = 'ns' AND
+  "uid" = 'abc123'
+;