Commit Graph
165 Commits
Author SHA1 Message Date
JoshVanL e465329b80 Revert vault free port and expose listener port from metrics server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-26 23:01:55 +01:00
JoshVanL fac8c30211 Ensures that integration tests use a free/or random port to start the
metrics server. Tests that do not depend on metrics, do not actually
start the server. Creates a shared test "FreePort" func. Fixes context
placement.

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-21 10:48:55 +01:00
James Munnelly 881b886049 Update Kubernetes API client call-sites
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-26 12:58:50 +00:00
JoshVanL 7a1620a632 Adds a duration gap for the app role Vault e2e issuer test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-03-10 13:18:44 +00:00
James Munnelly 9ee4a7d724 Use bind are rfc2136 server for DNS01 challenges
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-07 00:13:07 +00:00
James Munnelly 4fd0a7a89f e2e: don't wait for test namespace to be deleted before proceeding
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
James Munnelly 9b6ba36840 e2e: remove noisy log message
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
jetstack-botandGitHub 00b101de76 Merge pull request #2597 from meyskens/emailsans
Add Email SANs
2020-03-03 16:31:56 +00:00
Josh Soref 11778da61e spelling: request
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:27 -05:00
Josh Soref e27408c72f spelling: kubernetes
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:43:36 -05:00
Maartje Eyskens d3a623314c Add EmailSANs field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-21 08:49:00 +01:00
James Munnelly af63f08074 Fixup using devel tools in CI
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-23 12:57:03 +00:00
James Munnelly 8b43813072 Update test/e2e to no longer deploy using addons
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-22 22:08:27 +00:00
Periklis Tsirakidis a1f63b953d Use vault api and sdk modules instead of tagged repo
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
2020-01-20 12:27:09 +01:00
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:14:42 +00:00
JoshVanL f03cf45a9e Generate Name on e2e secret names and clean up
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:03:12 +00:00
JoshVanL 836800d1e7 Correctly de-duplicate ext key usages in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 14:34:45 +00:00
JoshVanL b3c301dfd4 De-duplicate ext key usages is e2e tests getting defaults
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 13:18:30 +00:00
jetstack-botandGitHub d3254e3843 Merge pull request #2260 from JoshVanL/2247-cert-key-usages
Ensure key usages are set on CertificateRequests created by the Certificate controller
2019-11-07 17:14:34 +00:00
JoshVanL b4e62d0fce Increase vault health timeout try
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 17:59:38 +00:00
JoshVanL 50d9b1f038 Ignore key encipherment of e2e tests when key is EC
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 15:23:51 +00:00
JoshVanL b2337cdf9e Creates a proper wrapper for vault port-forwarding to keep it alive and
healthy

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:23:23 +00:00
JoshVanL 206c4a3909 Ensure no ECDSA keys have key enrichment expected for e2e
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 9c2a37fbfd Remove key encipherment for DNS01 ACME ECDSA certs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 2bb8bfe07a Adds server auth to Venafi default key usages
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 48afefbeb4 Adds key usage exceptions for vault in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 78196cffe5 If certificate uses Vault or ACME issuer then add server/client auth key
usages as expected

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 192566d789 Adds conversion for key usage int to string
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL fca395bb4d Expose non-matching key-usages with string
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL a03560b93a Updates tests to ensure that key usages are correctly checked
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
James Munnelly 2138dde7c3 Run a single instance of Pebble during the e2e suite
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 21:48:58 +01:00
James Munnelly 0472ac4f09 Print 'kubectl apply' output during e2e tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-11 11:05:26 +01:00
James Munnelly 6138f0c3c4 Fix e2e jobs on Kubernetes 1.14 and below
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-10 18:36:19 +01:00
JoshVanL e64d0a26be Add allowed URI names to e2e test vault server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 15fccf9ebb Adds describe CertificateRequest in tests when waiting for valid
certificate fails and enable no CommonName for vault server

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 8175a59ab3 Changes e2e test for DNS for expected to be subset
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL b48b0e58fd Prevent panic in e2e tests caused by change in DNS name behaviour
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 13b0584838 Change behaviour to be more relaxed around common names
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 88cadca433 Adds proper checking for common name in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL dd7213866f Adds validation for URIs to certificate validation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
James Munnelly 655b432e32 Bump ingress-nginx to a version compatible with k8s 1.16
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-02 15:21:17 +01:00
JoshVanL 869370e226 Cleans up code and naming
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:52 +01:00
JoshVanL cd53c9e004 Wait for secret to contain cert for deletion e2e test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:01 +01:00
JoshVanL bcd94fc2f1 e2e: Adds fuz to cert duration check and fix waiting for cert unready
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:01 +01:00
JoshVanL 0f55a21e32 Set vault e2e to key_type=any
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:34:42 +01:00
JoshVanL ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:34:42 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
JoshVanL 9ffaae5bfd Adds review comments
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 14:01:19 +01:00
JoshVanL 5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00
JoshVanL f6e1964b93 Set role name correctly for vault addon with Kube Auth
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00