ContainerImage.Pinniped/test/integration
Ryan Richard 0b300cbe42 Use TokenCredentialRequest instead of base64 token with impersonator
To make an impersonation request, first make a TokenCredentialRequest
to get a certificate. That cert will either be issued by the Kube
API server's CA or by a new CA specific to the impersonator. Either
way, you can then make a request to the impersonator and present
that client cert for auth and the impersonator will accept it and
make the impesonation call on your behalf.

The impersonator http handler now borrows some Kube library code
to handle request processing. This will allow us to more closely
mimic the behavior of a real API server, e.g. the client cert
auth will work exactly like the real API server.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-03-10 10:30:06 -08:00
..
category_test.go Make TestGetPinnipedCategory more resilient. 2021-03-02 15:40:17 -06:00
cli_test.go Add integration test for using "kubectl exec" through the impersonator 2021-03-05 16:14:45 -08:00
concierge_api_serving_certs_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_availability_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_client_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_credentialissuer_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_credentialrequest_test.go Use TokenCredentialRequest instead of base64 token with impersonator 2021-03-10 10:30:06 -08:00
concierge_impersonation_proxy_test.go Use TokenCredentialRequest instead of base64 token with impersonator 2021-03-10 10:30:06 -08:00
concierge_kubecertagent_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_kubectl_test.go Rename pinniped-server -> pinniped-concierge 2020-10-06 14:59:03 -04:00
e2e_test.go Fix minor typo in e2e_test.go. 2021-03-09 12:12:52 -06:00
kube_api_discovery_test.go Add WhoAmIRequest Aggregated Virtual REST API 2021-02-22 20:02:41 -05:00
kubeclient_test.go Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy 2021-03-04 12:38:00 -06:00
supervisor_discovery_test.go Use new 'go.pinniped.dev/generated/latest' package. 2021-02-16 13:00:08 -06:00
supervisor_healthz_test.go test/integration: ensure no pods restart during integration tests 2021-02-04 10:24:33 -05:00
supervisor_login_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor_secrets_test.go Use new 'go.pinniped.dev/generated/latest' package. 2021-02-16 13:00:08 -06:00
supervisor_storage_garbage_collection_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor_storage_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor_upstream_test.go Use new 'go.pinniped.dev/generated/latest' package. 2021-02-16 13:00:08 -06:00
whoami_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00