4 Commits

Author	SHA1	Message	Date
Matt Moyer	6ce2f109bf	Refactor certificate generation for integration test Dex. ... Before, we did this in an init container, which meant if the Dex pod restarted we would have fresh certs, but our Tilt/bash setup didn't account for this. Now, the certs are generated by a Job which runs once and saves the generated files into a Secret. This should be a bit more stable. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2020-11-17 11:36:36 -06:00
Matt Moyer	b17ac6ec0b	Update integration tests to run Dex over HTTPS. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2020-11-16 20:23:20 -06:00
Matt Moyer	c8b17978a9	Convert CLI tests to work through an HTTP forward proxy. ... This change deploys a small Squid-based proxy into the `dex` namespace in our integration test environment. This lets us use the cluster-local DNS name (`http://dex.dex.svc.cluster.local/dex`) as the OIDC issuer. It will make generating certificates easier, and most importantly it will mean that our CLI can see Dex at the same name/URL as the supervisor running inside the cluster. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2020-11-16 17:16:58 -06:00
Matt Moyer	33fcc74417	Add Dex to our integration test environment and use it to test the CLI. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2020-10-13 16:50:38 -05:00