ContainerImage.Pinniped/test/cluster_capabilities/aks.yaml

# Copyright 2021 the Pinniped contributors. All Rights Reserved.
# SPDX-License-Identifier: Apache-2.0

# The name of the cluster type.
kubernetesDistribution: AKS

# Describe the capabilities of the cluster against which the integration tests will run.
capabilities:

  # Is it possible to borrow the cluster's signing key from the kube API server?
  clusterSigningKeyIsAvailable: false

  # Will the cluster successfully provision a load balancer if requested?
  hasExternalLoadBalancerProvider: true

  # Does the cluster allow requests without authentication?
  # https://kubernetes.io/docs/reference/access-authn-authz/authentication/#anonymous-requests
  anonymousAuthenticationSupported: false

  # Are LDAP ports on the Internet reachable without interference from network firewalls or proxies?
  canReachInternetLDAPPorts: true
Fix some nits from the previous commit that I accidentally merged before fixing. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# Copyright 2021 the Pinniped contributors. All Rights Reserved.`
Describe "anonymousAuthenticationSupported" test cluster capability and add more managed cluster types. This new capability describes whether a cluster is expected to allow anonymous requests (most do since k8s 1.6.x, but AKS has it disabled). This commit also contains new capability YAML files for AKS and EKS, mostly to document publicly how we expect our tests to function in those environments. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# SPDX-License-Identifier: Apache-2.0`

Run the LDAP client's integration tests only on Kind TestSimultaneousLDAPRequestsOnSingleProvider proved to be unreliable on AKS due to some kind of kubectl port-forward issue, so only run the LDAP client's integration tests on Kind. They are testing the integration between the client code and the OpenLDAP test server, not testing anything about Kubernetes, so running only on Kind should give us sufficient test coverage. 2021-07-08 18:10:53 +00:00			`# The name of the cluster type.`
			`kubernetesDistribution: AKS`

Describe "anonymousAuthenticationSupported" test cluster capability and add more managed cluster types. This new capability describes whether a cluster is expected to allow anonymous requests (most do since k8s 1.6.x, but AKS has it disabled). This commit also contains new capability YAML files for AKS and EKS, mostly to document publicly how we expect our tests to function in those environments. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# Describe the capabilities of the cluster against which the integration tests will run.`
			`capabilities:`

			`# Is it possible to borrow the cluster's signing key from the kube API server?`
			`clusterSigningKeyIsAvailable: false`

Add hasExternalLoadBalancerProvider to AKS/EKS capabilities files 2021-03-26 15:02:45 +00:00			`# Will the cluster successfully provision a load balancer if requested?`
			`hasExternalLoadBalancerProvider: true`

Describe "anonymousAuthenticationSupported" test cluster capability and add more managed cluster types. This new capability describes whether a cluster is expected to allow anonymous requests (most do since k8s 1.6.x, but AKS has it disabled). This commit also contains new capability YAML files for AKS and EKS, mostly to document publicly how we expect our tests to function in those environments. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# Does the cluster allow requests without authentication?`
			`# https://kubernetes.io/docs/reference/access-authn-authz/authentication/#anonymous-requests`
			`anonymousAuthenticationSupported: false`
Enable skipping of LDAP int tests when a firewall will block them 2021-05-28 23:12:57 +00:00
			`# Are LDAP ports on the Internet reachable without interference from network firewalls or proxies?`
			`canReachInternetLDAPPorts: true`