Move KMS integration tests to use keyring in da-cn-splice (#1123) (#1261)

Backports #1123 as part of DACH-NY/canton-network-internal#347 (comment)

Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Author: martinflorian-da

apps/app/src/test/resources/dumps/alice-kms-id-identity-dump.json

@@ -31,12 +31,12 @@ class ParticipantKmsIdentitiesIntegrationTest extends IntegrationTest with Stand
       .addConfigTransforms(
         (_, conf) => ConfigTransforms.bumpCantonPortsBy(22_000)(conf),
         (_, conf) => ConfigTransforms.bumpCantonDomainPortsBy(22_000)(conf),
-        // comment this to generate a fresh dump with fresh keys
         (_, conf) =>
           updateAllValidatorConfigs { case (name, c) =>
             if (name == "aliceValidator") {
               c.copy(
                 domains = c.domains.copy(extra = Seq.empty),
+                // comment this to generate a fresh dump with fresh keys
                 participantBootstrappingDump = Some(
                   ParticipantBootstrapDumpConfig
                     .File(
@@ -98,8 +98,8 @@ class ParticipantKmsIdentitiesIntegrationTest extends IntegrationTest with Stand
           "EXTRA_PARTICIPANT_DB" -> ("participant_extra_" + dbsSuffix),
           "KMS_TYPE" -> "gcp",
           "KMS_LOCATION_ID" -> "us-central1",
-          "KMS_PROJECT_ID" -> "da-cn-shared",
-          "KMS_KEY_RING_ID" -> "kms-ci",
+          "KMS_PROJECT_ID" -> "da-cn-splice",
+          "KMS_KEY_RING_ID" -> "integration-tests",
         ),
       )() {
         startAllSync(sv1Backend, sv1ScanBackend, sv1ValidatorBackend)
@@ -169,8 +169,8 @@ class ParticipantKmsIdentitiesIntegrationTest extends IntegrationTest with Stand
       )(
         "KMS_TYPE" -> "gcp",
         "KMS_LOCATION_ID" -> "us-central1",
-        "KMS_PROJECT_ID" -> "da-cn-shared",
-        "KMS_KEY_RING_ID" -> "kms-ci",
+        "KMS_PROJECT_ID" -> "da-cn-splice",
+        "KMS_KEY_RING_ID" -> "integration-tests",
       ) {
         startAllSync(sv1Backend, sv1ScanBackend, sv1ValidatorBackend)
 

apps/app/src/test/resources/dumps/sv2-kms-id-identity-dump.json

@@ -47,6 +47,7 @@ function check_patterns_locally() {
     'SpliceTests\.scala.*getMeterProvider\.get."cn_tests"' # test metrics
     '^[^:]+package-lock\.json:.*"integrity"' # appears in hashes
     'Preflight.*Test.*\.scala:.*s"https://cns' # hostnames in preflights
+    'Test.*\.scala:.*da-cn-splice' # GCP project we use for KMS keys used in integration tests
     'cluster/images/splice-test-temp-runner-hook/index.js' # gha-runner-hook copied over
     'apps/app/src/test/resources/dumps/.*-identity-dump.json' # encoded snapshots can randomly contain 'cn'
     'token-standard/CHANGELOG.md'