JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-26 23:01:55 +01:00
JoshVanL
fac8c30211
Ensures that integration tests use a free/or random port to start the
...
metrics server. Tests that do not depend on metrics, do not actually
start the server. Creates a shared test "FreePort" func. Fixes context
placement.
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-21 10:48:55 +01:00
James Munnelly
881b886049
Update Kubernetes API client call-sites
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-03-26 12:58:50 +00:00
JoshVanL
7a1620a632
Adds a duration gap for the app role Vault e2e issuer test
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-03-10 13:18:44 +00:00
James Munnelly
9ee4a7d724
Use bind are rfc2136 server for DNS01 challenges
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-03-07 00:13:07 +00:00
James Munnelly
4fd0a7a89f
e2e: don't wait for test namespace to be deleted before proceeding
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-03-06 20:47:17 +00:00
James Munnelly
9b6ba36840
e2e: remove noisy log message
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-03-06 20:47:17 +00:00
jetstack-bot and GitHub
00b101de76
Merge pull request #2597 from meyskens/emailsans
...
Add Email SANs
2020-03-03 16:31:56 +00:00
Josh Soref
11778da61e
spelling: request
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2020-02-24 17:20:27 -05:00
Josh Soref
e27408c72f
spelling: kubernetes
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2020-02-24 16:43:36 -05:00
Maartje Eyskens
d3a623314c
Add EmailSANs field
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-02-21 08:49:00 +01:00
James Munnelly
af63f08074
Fixup using devel tools in CI
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-01-23 12:57:03 +00:00
James Munnelly
8b43813072
Update test/e2e to no longer deploy using addons
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-01-22 22:08:27 +00:00
Periklis Tsirakidis
a1f63b953d
Use vault api and sdk modules instead of tagged repo
...
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu >
2020-01-20 12:27:09 +01:00
James Munnelly
b50f0a983a
Fix issue using new apiserver lib with older Kubernetes
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-12-17 17:14:42 +00:00
JoshVanL
f03cf45a9e
Generate Name on e2e secret names and clean up
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-13 11:03:12 +00:00
JoshVanL
836800d1e7
Correctly de-duplicate ext key usages in e2e tests
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-11 14:34:45 +00:00
JoshVanL
b3c301dfd4
De-duplicate ext key usages is e2e tests getting defaults
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-11 13:18:30 +00:00
jetstack-bot and GitHub
d3254e3843
Merge pull request #2260 from JoshVanL/2247-cert-key-usages
...
Ensure key usages are set on CertificateRequests created by the Certificate controller
2019-11-07 17:14:34 +00:00
JoshVanL
b4e62d0fce
Increase vault health timeout try
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 17:59:38 +00:00
JoshVanL
50d9b1f038
Ignore key encipherment of e2e tests when key is EC
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 15:23:51 +00:00
JoshVanL
b2337cdf9e
Creates a proper wrapper for vault port-forwarding to keep it alive and
...
healthy
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:23:23 +00:00
JoshVanL
206c4a3909
Ensure no ECDSA keys have key enrichment expected for e2e
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
9c2a37fbfd
Remove key encipherment for DNS01 ACME ECDSA certs
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
2bb8bfe07a
Adds server auth to Venafi default key usages
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
48afefbeb4
Adds key usage exceptions for vault in e2e tests
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
78196cffe5
If certificate uses Vault or ACME issuer then add server/client auth key
...
usages as expected
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
192566d789
Adds conversion for key usage int to string
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
fca395bb4d
Expose non-matching key-usages with string
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
JoshVanL
a03560b93a
Updates tests to ensure that key usages are correctly checked
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-11-05 14:22:25 +00:00
James Munnelly
2138dde7c3
Run a single instance of Pebble during the e2e suite
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-10-16 21:48:58 +01:00
James Munnelly
0472ac4f09
Print 'kubectl apply' output during e2e tests
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-10-11 11:05:26 +01:00
James Munnelly
6138f0c3c4
Fix e2e jobs on Kubernetes 1.14 and below
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-10-10 18:36:19 +01:00
JoshVanL
e64d0a26be
Add allowed URI names to e2e test vault server
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
15fccf9ebb
Adds describe CertificateRequest in tests when waiting for valid
...
certificate fails and enable no CommonName for vault server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
8175a59ab3
Changes e2e test for DNS for expected to be subset
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
b48b0e58fd
Prevent panic in e2e tests caused by change in DNS name behaviour
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
13b0584838
Change behaviour to be more relaxed around common names
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
88cadca433
Adds proper checking for common name in e2e tests
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
JoshVanL
dd7213866f
Adds validation for URIs to certificate validation
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-10-02 17:48:37 +01:00
James Munnelly
655b432e32
Bump ingress-nginx to a version compatible with k8s 1.16
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-10-02 15:21:17 +01:00
JoshVanL
869370e226
Cleans up code and naming
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-26 17:35:52 +01:00
JoshVanL
cd53c9e004
Wait for secret to contain cert for deletion e2e test
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-26 17:35:01 +01:00
JoshVanL
bcd94fc2f1
e2e: Adds fuz to cert duration check and fix waiting for cert unready
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-26 17:35:01 +01:00
JoshVanL
0f55a21e32
Set vault e2e to key_type=any
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-26 17:34:42 +01:00
JoshVanL
ced21c287f
Conformance: Ensure if a certificate is deleted then a new certificate is signed with
...
same key
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-26 17:34:42 +01:00
James Munnelly
973f4aa424
Update codebase for external dependencies
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-09-26 12:52:43 +01:00
JoshVanL
9ffaae5bfd
Adds review comments
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-23 14:01:19 +01:00
JoshVanL
5f25ffadd8
Increase scope of vault addon tokenreview permissions to cluster
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-23 13:54:48 +01:00
JoshVanL
f6e1964b93
Set role name correctly for vault addon with Kube Auth
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2019-09-23 13:54:48 +01:00