ContainerImage.Pinniped/test/cluster_capabilities/aks.yaml

# Copyright 2021 the Pinniped contributors. All Rights Reserved.
# SPDX-License-Identifier: Apache-2.0

# Describe the capabilities of the cluster against which the integration tests will run.
capabilities:

  # Is it possible to borrow the cluster's signing key from the kube API server?
  clusterSigningKeyIsAvailable: false

  # Does the cluster allow requests without authentication?
  # https://kubernetes.io/docs/reference/access-authn-authz/authentication/#anonymous-requests
  anonymousAuthenticationSupported: false
Fix some nits from the previous commit that I accidentally merged before fixing. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# Copyright 2021 the Pinniped contributors. All Rights Reserved.`
Describe "anonymousAuthenticationSupported" test cluster capability and add more managed cluster types. This new capability describes whether a cluster is expected to allow anonymous requests (most do since k8s 1.6.x, but AKS has it disabled). This commit also contains new capability YAML files for AKS and EKS, mostly to document publicly how we expect our tests to function in those environments. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-03-16 18:54:29 +00:00			`# SPDX-License-Identifier: Apache-2.0`

			`# Describe the capabilities of the cluster against which the integration tests will run.`
			`capabilities:`

			`# Is it possible to borrow the cluster's signing key from the kube API server?`
			`clusterSigningKeyIsAvailable: false`

			`# Does the cluster allow requests without authentication?`
			`# https://kubernetes.io/docs/reference/access-authn-authz/authentication/#anonymous-requests`
			`anonymousAuthenticationSupported: false`