Commit Graph
151 Commits
Author SHA1 Message Date
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:14:42 +00:00
JoshVanL f03cf45a9e Generate Name on e2e secret names and clean up
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:03:12 +00:00
JoshVanL 836800d1e7 Correctly de-duplicate ext key usages in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 14:34:45 +00:00
JoshVanL b3c301dfd4 De-duplicate ext key usages is e2e tests getting defaults
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 13:18:30 +00:00
jetstack-botandGitHub d3254e3843 Merge pull request #2260 from JoshVanL/2247-cert-key-usages
Ensure key usages are set on CertificateRequests created by the Certificate controller
2019-11-07 17:14:34 +00:00
JoshVanL b4e62d0fce Increase vault health timeout try
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 17:59:38 +00:00
JoshVanL 50d9b1f038 Ignore key encipherment of e2e tests when key is EC
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 15:23:51 +00:00
JoshVanL b2337cdf9e Creates a proper wrapper for vault port-forwarding to keep it alive and
healthy

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:23:23 +00:00
JoshVanL 206c4a3909 Ensure no ECDSA keys have key enrichment expected for e2e
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 9c2a37fbfd Remove key encipherment for DNS01 ACME ECDSA certs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 2bb8bfe07a Adds server auth to Venafi default key usages
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 48afefbeb4 Adds key usage exceptions for vault in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 78196cffe5 If certificate uses Vault or ACME issuer then add server/client auth key
usages as expected

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL 192566d789 Adds conversion for key usage int to string
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL fca395bb4d Expose non-matching key-usages with string
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
JoshVanL a03560b93a Updates tests to ensure that key usages are correctly checked
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
James Munnelly 2138dde7c3 Run a single instance of Pebble during the e2e suite
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 21:48:58 +01:00
James Munnelly 0472ac4f09 Print 'kubectl apply' output during e2e tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-11 11:05:26 +01:00
James Munnelly 6138f0c3c4 Fix e2e jobs on Kubernetes 1.14 and below
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-10 18:36:19 +01:00
JoshVanL e64d0a26be Add allowed URI names to e2e test vault server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 15fccf9ebb Adds describe CertificateRequest in tests when waiting for valid
certificate fails and enable no CommonName for vault server

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 8175a59ab3 Changes e2e test for DNS for expected to be subset
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL b48b0e58fd Prevent panic in e2e tests caused by change in DNS name behaviour
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 13b0584838 Change behaviour to be more relaxed around common names
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 88cadca433 Adds proper checking for common name in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL dd7213866f Adds validation for URIs to certificate validation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
James Munnelly 655b432e32 Bump ingress-nginx to a version compatible with k8s 1.16
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-02 15:21:17 +01:00
JoshVanL 869370e226 Cleans up code and naming
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:52 +01:00
JoshVanL cd53c9e004 Wait for secret to contain cert for deletion e2e test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:01 +01:00
JoshVanL bcd94fc2f1 e2e: Adds fuz to cert duration check and fix waiting for cert unready
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:01 +01:00
JoshVanL 0f55a21e32 Set vault e2e to key_type=any
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:34:42 +01:00
JoshVanL ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:34:42 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
JoshVanL 9ffaae5bfd Adds review comments
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 14:01:19 +01:00
JoshVanL 5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00
JoshVanL f6e1964b93 Set role name correctly for vault addon with Kube Auth
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00
JoshVanL f2f5fccb85 Addresses comments and makes vault auth pointers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00
Adam KunickiandJoshVanL 7058dfc687 Added Kubernetes authentication type for Vault Issuer
Signed-off-by: Adam Kunicki <adam@streamsets.com>
2019-09-23 13:33:29 +01:00
James Munnelly f2f3aee50d Update codebase for new API group
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-23 12:06:13 +01:00
James Munnelly bf9fbea23f Update codebase for new meta apigroup
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:04 +01:00
James Munnelly eda613e6f0 Revert API version change in samplewebhook
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 17:26:55 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
JoshVanL 6a362c67b0 Move e2e output logs with suffixes
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-12 15:59:54 +01:00
JoshVanL 3455747723 Include previous logs and use all containers from pods
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-11 22:02:10 +01:00
James Munnelly c4e00311ba Set certificate name annotation in certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-03 11:20:51 +01:00
stuart.warren 7eb1e34e48 feat: enable certificate keyusages
Enable users to request x509 key usages and extended key usages when
defining a certificate or certificate signing request

fixes: #301

Signed-off-by: stuart.warren <stuart.warren@ocado.com>
2019-08-31 01:00:00 +01:00
JoshVanL 277dc7ab17 Adds CertificateRequest to condition matcher in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 17:18:11 +01:00
James Munnelly 5bd0a37686 Update Deployment manifests to use apps/v1
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-22 13:40:13 +01:00
jetstack-botandGitHub 458c7193d4 Merge pull request #1861 from munnerz/e2e-logging
Fix fetching logs in e2e test framework
2019-07-08 14:11:46 +01:00
James Munnelly 20e6a08a87 Fix fetching logs in e2e test framework
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-08 12:52:07 +01:00