Commit Graph

  • efd973fa17 Test waiting for a minute and keeping connection open Andrew Keesler 2021-03-15 12:28:53 -07:00
  • 4f671f5dca dynamiccert: unit test with DynamicServingCertificateController Monis Khan 2021-03-15 16:59:51 -04:00
  • a5384a6e38 Merge branch 'main' into impersonation-proxy Ryan Richard 2021-03-15 13:06:36 -07:00
  • e64f2fe7fb Bump golang from 1.16.1 to 1.16.2 dependabot[bot] 2021-03-15 19:55:44 +00:00
  • 035362f4d3 Merge pull request #494 from vmware-tanzu/dependabot/go_modules/k8s.io/klog/v2-2.8.0 Matt Moyer 2021-03-15 12:54:46 -07:00
  • 8065a8d2e6 TestKubeCertAgent waits for CredentialIssuer strategy to be successful Ryan Richard 2021-03-15 11:42:57 -07:00
  • e22ad6171a Fix a race detector warning by re-declaring err in a t.Cleanup() Ryan Richard 2021-03-15 09:37:19 -07:00
  • c2b0acf241 Bump k8s.io/klog/v2 from 2.6.0 to 2.8.0 dependabot[bot] 2021-03-15 17:36:36 +00:00
  • 00694c9cb6 dynamiccert: split into serving cert and CA providers Monis Khan 2021-03-15 12:24:07 -04:00
  • dc96f398da Merge pull request #497 from mattmoyer/ignore-local-user-authenticator-coverage Matt Moyer 2021-03-15 08:46:28 -07:00
  • 755a87cdbb Ignore test coverage for local-user-authenticator. Matt Moyer 2021-03-15 10:43:17 -05:00
  • c538a4e8e8 Merge pull request #495 from mattmoyer/add-golangci-lint-to-pre-commit-hooks Matt Moyer 2021-03-15 08:23:09 -07:00
  • 41949d8e07 Add golangci-lint to .pre-commit-config.yaml. Matt Moyer 2021-03-15 10:16:49 -05:00
  • 4c162be8bf impersonator: add comment about long running func Monis Khan 2021-03-15 09:43:06 -04:00
  • b530cef3b1 impersonator: encode proper API status on failure Monis Khan 2021-03-13 20:25:23 -05:00
  • c82f568b2c certauthority.go: Refactor issuing client versus server certs Ryan Richard 2021-03-12 16:09:16 -08:00
  • 5e4746e96b impersonator: match kube API server long running func Monis Khan 2021-03-12 16:36:37 -05:00
  • 077aa8a42e Fix a copy-paste typo in the ImpersonationProxyInfo JSON field name. Matt Moyer 2021-03-12 13:23:24 -06:00
  • d509e7012e Add eventually loop to port-forward test Margo Crawford 2021-03-12 10:44:11 -08:00
  • 8c0bafd5be impersonator: prep work for future SA token support Monis Khan 2021-03-12 10:33:30 -05:00
  • 12b13b1ea5 impersonator: wire in genericapiserver.Config Monis Khan 2021-03-12 09:56:34 -05:00
  • 5b1dc0abdf test/integration: add some more debugging to kubectl impersonation test Andrew Keesler 2021-03-12 10:45:36 -05:00
  • 253e0f8e9a test/integration: TestImpersonationProxy/websocket_client passes on my machine now Andrew Keesler 2021-03-12 09:54:59 -05:00
  • 87f2899047 impersonator_test.go: small refactor of previous commit Ryan Richard 2021-03-11 17:24:52 -08:00
  • 6ddf4c04e6 impersonator_test.go: Test failed and anonymous auth Ryan Richard 2021-03-11 17:11:38 -08:00
  • 1d68841c78 impersonator_test.go: Test one more thing and small refactors Ryan Richard 2021-03-11 16:44:08 -08:00
  • f77c92560f Rewrite impersonator_test.go, add missing argument to IssuePEM() Ryan Richard 2021-03-11 16:27:16 -08:00
  • c12a23725d Fix lint errors from a previous commit Ryan Richard 2021-03-11 16:21:40 -08:00
  • d5beba354b Merge pull request #487 from vmware-tanzu/dependabot/docker/golang-1.16.1 Matt Moyer 2021-03-11 16:12:07 -08:00
  • 71712b2d00 Add test for http2 Andrew Keesler 2021-03-11 15:49:24 -08:00
  • ad3f04a982 Bump golang from 1.16.0 to 1.16.1 dependabot[bot] 2021-03-11 22:25:17 +00:00
  • a52455504f Capitalize "Concierge" in these error messages as well, for consistency. Matt Moyer 2021-03-11 16:18:15 -06:00
  • 4f154100ff Remove "--concierge-mode" flag from "pinniped login [...]" commands. Matt Moyer 2021-03-11 16:14:56 -06:00
  • d2d9b1e49e Stop outputting "--concierge-mode" from "pinniped get kubeconfig". Matt Moyer 2021-03-11 16:13:29 -06:00
  • c9ce067a0e Captialize "API" in this error message. Matt Moyer 2021-03-11 16:11:46 -06:00
  • 1af25552a0 Update ROADMAP.md Pablo Schuhmacher 2021-03-11 13:58:34 -08:00
  • a64786a728 Fix TestCLIGetKubeconfigStaticToken for new CLI log output. Matt Moyer 2021-03-11 15:47:39 -06:00
  • 2d28d1da19 Implement all optional methods in dynamic certs provider Monis Khan 2021-03-11 16:20:25 -05:00
  • 78fdc59d2d Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-11 14:56:11 -06:00
  • 29d7f406f7 Test double impersonation as the cluster admin Ryan Richard 2021-03-11 12:52:39 -08:00
  • 3449b896d6 Merge pull request #488 from mattmoyer/add-retries-for-supervisor-discovery-tests Matt Moyer 2021-03-11 12:22:22 -08:00
  • 22ca2da1ff test/integration: add "kubectl attach" test to TestImpersonationProxy Margo Crawford 2021-03-11 15:10:16 -05:00
  • e98c6dfdd8 Add retries to TestSupervisorTLSTerminationWithSNI and TestSupervisorOIDCDiscovery. Matt Moyer 2021-03-11 13:18:15 -06:00
  • fcd8c585c3 test/integration: update "kubectl port-forward" test to use non-privileged port Andrew Keesler 2021-03-11 13:04:36 -05:00
  • a918e9fb97 concierge_impersonation_proxy_test.go: Fix lint error in previous commit Ryan Richard 2021-03-11 10:04:24 -08:00
  • 34accc3dee Test using a service account token to auth to the impersonator Ryan Richard 2021-03-11 10:01:17 -08:00
  • 61d64fc4c6 Use ioutil.ReadFile instead of os.ReadFile Ryan Richard 2021-03-11 08:58:54 -08:00
  • b793b9a17e test/integration: add 'kubectl logs' test to TestImpersonationProxy Andrew Keesler 2021-03-11 10:42:12 -05:00
  • 7b1ecf79a6 Fix race between err chan send and re-queue Monis Khan 2021-03-11 10:13:07 -05:00
  • 32b038c639 test/integration: add 'kubectl cp' test to TestImpersonationProxy Andrew Keesler 2021-03-11 10:02:28 -05:00
  • d13bb07b3e Add integration test for using WhoAmIRequest through impersonator Ryan Richard 2021-03-10 16:57:15 -08:00
  • 24396b6af1 Use gorilla websocket library so squid proxy works Margo Crawford 2021-03-10 15:49:09 -08:00
  • 006dc8aa79 Small test refactor Ryan Richard 2021-03-10 14:50:46 -08:00
  • 2a2e2f532b Remove an integration test that is covered elsewhere now Ryan Richard 2021-03-10 14:17:20 -08:00
  • 1078bf4dfb Don't pass credentials when testing impersonation proxy port is closed Ryan Richard 2021-03-10 13:08:15 -08:00
  • c14621428f Merge pull request #485 from vmware-tanzu/pabloschuhmacher-patch-2 Matt Moyer 2021-03-10 12:43:55 -08:00
  • 6582c23edb Fix a race detector error in a unit test Monis Khan 2021-03-10 11:24:42 -08:00
  • 0b300cbe42 Use TokenCredentialRequest instead of base64 token with impersonator Ryan Richard 2021-03-10 10:30:06 -08:00
  • 876f0a55d8 Create ROADMAP.md in actual markdown Pablo Schuhmacher 2021-03-09 18:41:40 -08:00
  • c853707889 Added integration test for using websockets via the impersonation proxy Margo Crawford 2021-03-09 16:58:44 -08:00
  • 005133fbfb Add more debug logging when waiting for pending strategies. Matt Moyer 2021-03-09 16:56:53 -06:00
  • 0cb1538b39 Fix linter warnings, including a bit of refactoring. Matt Moyer 2021-03-09 15:16:46 -06:00
  • 0abe10e6b2 Add new behavior to "pinniped get kubeconfig" to wait for pending strategies to become non-pending. Matt Moyer 2021-03-09 14:48:16 -06:00
  • 883b90923d Add integration test for kubectl port-forward with impersonation Margo Crawford 2021-03-09 11:32:27 -08:00
  • d6a0dfa497 Add some debug logging when "pinniped get kubeconfig" fails to find a successful strategy. Matt Moyer 2021-03-09 12:39:44 -06:00
  • 29d5e43220 Fix minor typo in e2e_test.go. Matt Moyer 2021-03-09 12:12:52 -06:00
  • eef1fd0c64 Merge pull request #481 from vmware-tanzu/dependabot/go_modules/github.com/ory/fosite-0.39.0 Matt Moyer 2021-03-09 07:51:27 -06:00
  • b2be83ee45 Bump github.com/ory/fosite from 0.38.0 to 0.39.0 dependabot[bot] 2021-03-09 05:50:01 +00:00
  • b20a8358d3 Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-08 15:16:40 -06:00
  • a58b460bcb Switch TestImpersonationProxy to get clients from library.NewKubeclient instead of directly from kubernetes.NewForConfig. Matt Moyer 2021-03-08 15:03:34 -06:00
  • 8fd6a71312 Use simpler prefix matching for impersonation headers. Matt Moyer 2021-03-08 14:36:29 -06:00
  • 6efbd81f75 Rename this flag types for consistency. Matt Moyer 2021-03-08 14:33:38 -06:00
  • a059d8dfce Refactor "get kubeconfig" a bit more to clean things up. Matt Moyer 2021-03-08 14:31:13 -06:00
  • 8c0a073cb6 Fix this constant name to match its value. Matt Moyer 2021-03-08 13:31:16 -06:00
  • 389cd3486b Rework "pinniped get kubeconfig" so that --concierge-mode can be used even when auto-discovering other parameters. Matt Moyer 2021-03-08 11:43:56 -06:00
  • eac108aee5 Merge pull request #478 from vmware-tanzu/prepare-script-macos-big-sur Matt Moyer 2021-03-08 10:02:52 -06:00
  • 49ec16038c Add integration test for using "kubectl exec" through the impersonator Ryan Richard 2021-03-05 16:14:45 -08:00
  • 4bd68b1fa1 Use LC_ALL=C instead of LC_CTYPE=C because it works on Big Sur Margo Crawford 2021-03-05 15:25:52 -08:00
  • 73419313ee Log when the validation eventually succeeds. Matt Moyer 2021-03-05 16:59:43 -06:00
  • 4750d7d7d2 The stderr from "pinniped get kubeconfig" is no longer empty. Matt Moyer 2021-03-05 16:57:24 -06:00
  • ba0dc3bf52 Remove this test retry loop since the "get kubeconfig" step should now wait. Matt Moyer 2021-03-05 16:39:57 -06:00
  • 5d8594b285 Add validation step to "pinniped get kubeconfig". Matt Moyer 2021-03-05 16:35:42 -06:00
  • ce1b6303d9 Add an "--output" flag to "pinniped get kubeconfig". Matt Moyer 2021-03-05 15:53:30 -06:00
  • 36bc679142 Add diagnostic logging to "pinniped get kubeconfig". Matt Moyer 2021-03-05 15:52:17 -06:00
  • c4f6fd5b3c Add a bit nicer assertion helper in testutil/testlogger. Matt Moyer 2021-03-05 15:49:45 -06:00
  • 52f58477b8 Wait for the ELB to become available _before_ starting the kubectl command. Matt Moyer 2021-03-05 09:32:49 -06:00
  • d848499176 Close this HTTP response body in TestE2EFullIntegration. Matt Moyer 2021-03-05 08:45:25 -06:00
  • c3b7d21037 Be less picky about what error code is returned here. Matt Moyer 2021-03-05 08:39:48 -06:00
  • 832bc2726e Merge pull request #477 from vmware-tanzu/dependabot/go_modules/github.com/google/go-cmp-0.5.5 Matt Moyer 2021-03-05 08:20:51 -06:00
  • 3833ba0430 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 dependabot[bot] 2021-03-05 05:59:54 +00:00
  • ec133b9743 Resolve some new linter errors Ryan Richard 2021-03-04 17:44:01 -08:00
  • d8c6894cbc All controller unit tests should not cancel context until test is over Ryan Richard 2021-03-04 17:25:43 -08:00
  • b102aa8991 In unit test, wait for obj from informer instead of resource version Ryan Richard 2021-03-04 15:36:51 -08:00
  • 9eb97e2683 Use Eventually when making tls connections and avoid resource version 0 Ryan Richard 2021-03-04 13:52:34 -08:00
  • fea626b654 Remove this proxy-related test code that we ended up not needing. Matt Moyer 2021-03-04 17:19:59 -06:00
  • 16163b989b Use regular http.Client in this test. Matt Moyer 2021-03-04 17:18:24 -06:00
  • 165fce67af Use the unversioned REST client for this check. Matt Moyer 2021-03-04 16:23:39 -06:00
  • 6a8f377781 Fix a linter warning. Matt Moyer 2021-03-04 16:16:03 -06:00
  • d24cf4b8a7 Go back to testing entirely through the proxy, but add a retry loop during the first connection. Matt Moyer 2021-03-04 16:05:56 -06:00
  • 34e15f03c3 Simplify const declarations in flag_types.go. Matt Moyer 2021-03-04 15:17:42 -06:00