1718 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ryan Richard	d5be37673a	Merge branch 'main' into prepare-supervisor-on-kind.sh	2021-03-31 11:42:06 -07:00
Ryan Richard	7bb5657c4d	Add hack/prepare-supervisor-on-kind.sh ... A demo of running the Supervisor and Concierge on a kind cluster. Can be used to quickly set up an environment for manual testing. Also added some missing copyright headers to other hack scripts.	2021-03-31 11:39:10 -07:00
Matt Moyer	fe9f12a29c	Merge pull request #539 from mattmoyer/upgrade-kubernetes-deps ... Upgrade to prereleased Kubernetes v1.20.5++ dependencies.	2021-03-31 11:21:54 -07:00
Matt Moyer	bea75bb7ac	Upgrade to prereleased Kubernetes v1.20.5++ dependencies. ... These commits include security fixes (CVE-2021-3121) for code generated by github.com/gogo/protobuf. We expect this fix to also land in v1.20.6, but we don't want to wait for it. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-31 12:53:41 -05:00
Matt Moyer	081de8da62	Merge pull request #538 from vmware-tanzu/dependabot/docker/debian-10.9-slim ... Bump debian from 10.8-slim to 10.9-slim	2021-03-31 06:00:27 -07:00
dependabot[bot]	469f864de3	Bump debian from 10.8-slim to 10.9-slim ... Bumps debian from 10.8-slim to 10.9-slim. Signed-off-by: dependabot[bot] <support@github.com>	2021-03-31 05:41:15 +00:00
Margo Crawford	dc510792c4	Merge pull request #536 from vmware-tanzu/secret-deletion-not-found-flake ... Do not error when trying to delete the TLS secret and you get a not found	2021-03-30 15:46:32 -07:00
Margo Crawford	8b6fe0ac70	Fix lint error	2021-03-30 14:53:26 -07:00
Margo Crawford	d47603472d	Do not error when trying to delete the TLS secret and you get a not found	2021-03-30 14:44:06 -07:00
Matt Moyer	d4baeff94e	Merge pull request #534 from mattmoyer/deflake-categories-test-rate-limiting ... Deflake TestGetPinnipedCategory.	2021-03-30 13:46:55 -07:00
Matt Moyer	210114dbe1	Merge pull request #535 from mattmoyer/deflake-impersonation-proxy-test-dns ... Deflake TestImpersonationProxy (especially on EKS).	2021-03-30 12:31:44 -07:00
Matt Moyer	4ebd0f5f12	Deflake TestImpersonationProxy (especially on EKS). ... This test could flake if the load balancer hostname was provisioned but is not yet resolving in DNS from the test process. The fix is to retry this step for up to 5 minutes. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-30 13:48:53 -05:00
Matt Moyer	f02b39b80f	Deflake TestGetPinnipedCategory. ... This test could fail when the cluster was under heavy load. This could cause kubectl to emit "Throttling request took [...]" logs that triggered a failure in the test. The fix is to ignore these innocuous warnings. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-30 13:38:33 -05:00
Margo Crawford	608be8332e	Merge pull request #533 from vmware-tanzu/eks-load-balancer-annotation ... Add annotation to make the idle timeout be over 1 hour rather than 1 minute	2021-03-30 11:12:54 -07:00
Margo Crawford	3742719427	Add annotation to make the idle timeout be over 1 hour rather than 1 minute ... - Note that 4000 seconds is the maximum value that AWS allows.	2021-03-30 09:12:34 -07:00
Andrew Keesler	f00a02dcca	Merge pull request #529 from microwavables/main ... updated adopters.md instructions and included logos from VMware Tanzu…	2021-03-29 16:16:02 -04:00
Nanci Lancaster	017c891fb8	Merge branch 'main' into main	2021-03-29 12:29:25 -05:00
Margo Crawford	d8baa43903	Add new non-idle timeout integration test for impersonation proxy ... Signed-off-by: Ryan Richard <richardry@vmware.com>	2021-03-29 09:30:51 -07:00
Nanci Lancaster	5c741bc423	Merge pull request #1 from microwavables/Adding-in-TKG-and-TMC-to-Adopters ... Updated adopters.md file to include TMC and TKG	2021-03-29 09:49:54 -05:00
Nanci Lancaster	e99e175ce2	Updated adopters.md file to include TMC and TKG ... Based on Andrew Keesler's feedback, I added in TMC and TKG adopter components to the file.	2021-03-29 09:48:34 -05:00
Matt Moyer	003e3e3c4d	Merge pull request #532 from vmware-tanzu/group-link ... Update Google Group Link	2021-03-29 07:36:54 -07:00
Matt Moyer	391202c253	Merge pull request #517 from mattmoyer/deflake-supervisor-oidc-discovery-test ... Tweak some assertions in TestSupervisorOIDCDiscovery.	2021-03-29 07:35:58 -07:00
Ryan Richard	95bb4c4be5	Fix concierge_impersonation_proxy_test.go on AKS ... Also send the correct instance of `t` into a helper function which makes assertions.	2021-03-26 19:32:46 -07:00
Mo Khan	32422f18f1	Update Google Group Link ... Remove the user account prefix.	2021-03-26 22:11:16 -04:00
Mo Khan	d52f500b83	Merge pull request #531 from mattmoyer/remove-test-dumplogs-helper ... Remove library.DumpLogs test helper.	2021-03-26 18:58:07 -04:00
Matt Moyer	defad3cdd7	Remove library.DumpLogs test helper. ... We had this code that printed out pod logs when certain tests failed, but it is a bit cumbersome. We're removing it because we added a CI task that exports all pod logs after every CI run, which accomplishes the same thing and provides us a bunch more data. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-26 16:43:02 -05:00
Matt Moyer	c6d7724b67	In TestImpersonationProxy, instead of failing in this case just skip the test. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-26 16:28:33 -05:00
Ryan Richard	3359311228	concierge_impersonation_proxy_test.go: fix typo in previous commit	2021-03-26 09:49:49 -07:00
Ryan Richard	7e16619146	concierge_impersonation_proxy_test.go: handle TKGS test clusters ... Handle any test cluster which supports load balancers but should not automatically start the impersonator, e.g. TKGS clusters.	2021-03-26 09:28:42 -07:00
Ryan Richard	a084544f08	Add hasExternalLoadBalancerProvider to AKS/EKS capabilities files	2021-03-26 08:03:51 -07:00
Mo Khan	c2588cf035	Merge pull request #528 from enj/enj/i/impersonation-proxy-authz-user-extra ... impersonation proxy: add RBAC to impersonate user extra and SAs	2021-03-26 00:37:24 -04:00
Monis Khan	2179c2879a	impersonation proxy: add RBAC to impersonate user extra and SAs ... Signed-off-by: Monis Khan <mok@vmware.com>	2021-03-25 22:21:57 -04:00
Margo Crawford	b6e217e13a	Hardcode type "webhook" in concierge_impersonation_proxy_test.go ... Signed-off-by: Ryan Richard <richardry@vmware.com>	2021-03-25 17:19:47 -07:00
Margo Crawford	6f2882b831	Explicitly set the correct authenticator for impersonator test ... Signed-off-by: Ryan Richard <richardry@vmware.com>	2021-03-25 16:57:37 -07:00
Margo Crawford	cd6e48bfa8	Use a random password for the dex integration test user ... Signed-off-by: Ryan Richard <richardry@vmware.com>	2021-03-25 15:12:17 -07:00
Nanci Lancaster	818535f30d	updated adopters.md instructions and included logos from VMware Tanzu and Kubeapps ... Signed-off-by: Nanci Lancaster <nancil@vmware.com>	2021-03-25 16:17:41 -05:00
Margo Crawford	c0361645e2	Merge pull request #355 from vmware-tanzu/impersonation-proxy ... Impersonation proxy	2021-03-25 13:19:18 -07:00
Margo Crawford	6bf8bfe9a8	Merge remote-tracking branch 'origin/main' into impersonation-proxy	2021-03-24 17:22:40 -07:00
Matt Moyer	ea130ea781	Merge pull request #525 from vmware-tanzu/microwavables-patch-1 ... Added kubeapps and vmware tanzu logos	2021-03-24 16:28:36 -07:00
Nanci Lancaster	03619fc878	Added kubeapps and vmware tanzu logos ... these logos will be used for the adopters.md file	2021-03-24 18:03:57 -05:00
Matt Moyer	454348b2fd	Merge pull request #524 from mattmoyer/allow-prebuilt-cli-binaries-for-testing ... Allow running CLI-related integration tests with pre-built binary.	2021-03-23 16:19:50 -07:00
Matt Moyer	cda8bd6e26	Allow running CLI-related integration tests with pre-built binary. ... This allows setting `$PINNIPED_TEST_CLI` to point at an existing `pinniped` CLI binary instead of having the test build one on-the-fly. This is more efficient when you're running the tests across many clusters as we do in CI. Building the CLI from scratch in our CI environment takes 1.5-2 minutes, so this change should save nearly that much time on every test job. Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-23 17:19:09 -05:00
Matt Moyer	c0d32f10b2	Add some test debug logging when running the CLI. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-23 12:07:34 -05:00
Matt Moyer	ce5b05f912	Add some debug logging to measure how long the CLI build takes. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-23 12:06:35 -05:00
Matt Moyer	176fb6a139	Authenticators are no longer namespaced, so clean up these test logs. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-23 10:33:05 -05:00
Matt Moyer	9501168265	Simplify TestCLIGetKubeconfigStaticToken now that there's only a single table case. ... Signed-off-by: Matt Moyer <moyerm@vmware.com>	2021-03-23 10:26:04 -05:00
Matt Moyer	2e79664f3d	Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy	2021-03-23 09:05:13 -05:00
Andrew Keesler	e70788204b	Merge pull request #516 from ankeesler/cli-docs ... Add CLI command for generating docs	2021-03-23 09:58:47 -04:00
Andrew Keesler	f6646eb2b7	cmd/pinniped: add generate-markdown-help for generating CLI doc ... This command is hidden. We want to use this to generate our CLI reference docs upon release. Signed-off-by: Andrew Keesler <akeesler@vmware.com>	2021-03-23 09:35:58 -04:00
Ryan Richard	75cfda0ffe	prepare-for-integration-tests.sh: Check Chrome and chromedriver versions ... They usually need to match, or at least be close, so added some code to help us remember to do that.	2021-03-22 16:54:22 -07:00