Commit Graph

185 Commits

Author SHA1 Message Date
Jordan Liggitt
11c2674ec2 Fix CSR test to accept certs shorter than the requested duration 2021-10-01 09:14:54 -04:00
Monis Khan
8d49502fcd csr: update e2e conformance test with expirationSeconds usage
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-01 23:38:16 -04:00
Arda Güçlü
676958c2bd Fix NodeAuthenticator tests in dual stack 2021-06-21 15:41:13 +03:00
Arda Güçlü
0965cad63a Use builtin JoinHostPort function 2021-05-18 14:49:02 +03:00
Arda Güçlü
2ae12e6345 Add Node IP IPv6 formatting in NodeAuthenticator tests 2021-05-18 11:47:15 +03:00
Michael Taufen
b33cd86a27 Update tests to use agnhost 2.32
Updates e2e tests to use agnhost 2.32, which fixes an issue with the
conformance tests for ServiceAccountIssuerDiscovery.

Original fix: https://github.com/kubernetes/kubernetes/pull/101589

Image promotion: https://github.com/kubernetes/k8s.io/pull/1994
2021-05-03 14:23:46 -07:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Shihang Zhang
5d1774e9db promote RootCAConfigMap e2e test to Conformance 2021-02-22 10:37:41 -08:00
Michael Taufen
f3e223cbbc Promote ServiceAccountIssuerDiscovery test to conformance
This satisfies the graduation criteria for promoting
ServiceAccountIssuerDiscovery to GA, per the KEP:
https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/1393-oidc-discovery

The test only uses GA APIs and has been passing for well
over two weeks:
https://testgrid.k8s.io/sig-release-master-blocking#gce-cos-master-alpha-features&include-filter-by-regex=ServiceAccountIssuerDiscovery
2021-02-05 16:05:15 -08:00
Michael Taufen
05439d48aa Tolerate disabled RBAC in ServiceAccountIssuerDiscovery test
Also clean up the binding after the test.
2021-02-05 10:59:18 -08:00
Michael Taufen
cf809c37c4 Move ServiceAccountIssuerDiscovery test into main e2e suite
By removing feature tag. In preparation for GA.
2021-01-29 16:18:26 -08:00
Claudiu Belu
ee9be7ce5a tests: Removes node created by test
The test "A node shouldn't be able to create another node" could create
a node during its run, but it doesn't delete it in this case.

This commit addresses this issue.
2021-01-11 15:39:43 -08:00
Shihang Zhang
22ae49bb5d Promote TokenRequest e2e test to Conformance 2020-11-06 13:51:48 -08:00
Shihang Zhang
d40f0c43c4 separate RootCAConfigMap from BoundServiceAccountTokenVolume 2020-11-04 17:10:39 -08:00
Shihang Zhang
ff641f6eb2 mv TokenRequest and TokenRequestProjection to GA 2020-10-29 20:47:01 -07:00
Kubernetes Prow Robot
2603cc1fcf Merge pull request #94835 from zshihang/upgrade
upgrade test for BoundServiceAccountTokenVolume
2020-10-03 14:17:05 -07:00
Shihang Zhang
637235e893 upgrade test for BoundServiceAccountTokenVolume 2020-09-24 09:55:05 -07:00
Claudiu Belu
89eae73323 tests: Refactors agnhost image pod usage in tests
A previous commit created a few agnhost related functions that creates agnhost
pods / containers for general purposes.

Refactors tests to use those functions.
2020-09-22 13:09:49 -07:00
Daniel Smith
75f835aa08 move port definitions to a common location 2020-09-02 10:48:25 -07:00
Jordan Liggitt
f5490cb5c8 Remove flaky audit e2e test 2020-08-17 09:59:59 -04:00
Jordan Liggitt
6fb7d40a72 Move kube-apiserver client cert back to simple e2e 2020-06-10 15:28:26 -04:00
Jordan Liggitt
a504445086 Generated files
Change-Id: I598d686849f4b97846757b227f5191bac031798b
2020-06-05 04:58:14 +00:00
Jordan Liggitt
ea8f4cb536 Update CSR e2e to use v1 2020-06-05 00:50:01 -04:00
Kubernetes Prow Robot
84861d2102 Merge pull request #91558 from liggitt/csr-e2e
Add e2e coverage for the CertificateSigningRequest API, enable patch support for approval subresource
2020-06-02 06:28:15 -07:00
hasheddan
7b0b5cb8d1 Fix minor typo in projected service account e2e test
Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-06-01 14:10:09 -05:00
Jordan Liggitt
0e2b13aed2 Add CertificateSigningRequest API coverage tests 2020-05-29 11:50:44 -04:00
David Eads
ed4e6f1026 remove dynamic audit 2020-05-27 15:18:53 -04:00
Kubernetes Prow Robot
57b0c310b7 Merge pull request #90390 from ii/promote-serviceaccount-resource-lifecycle-test
Promote ServiceAccount resource lifecycle test - +3 conformance coverage
2020-05-20 16:44:33 -07:00
Shihang Zhang
3db7275b54 set proper file permission for projected service account volume 2020-05-04 18:25:23 -07:00
Caleb Woodbine
bd9269f444 Fix formatting 2020-04-30 14:21:04 +12:00
Caleb Woodbine
e09e781a0c Promote ServiceAccount resource lifecycle test 2020-04-23 16:32:54 +12:00
Kubernetes Prow Robot
c13a9401ca Merge pull request #90193 from ii/create-serviceaccount-resource-lifecycle-test
Create ServiceAccount resource lifecycle test - +3 endpoint coverage
2020-04-22 19:22:00 -07:00
Kubernetes Prow Robot
fc9d174102 Merge pull request #88248 from claudiubelu/tests/reduce-to-agnhost-mounttest
tests: Replaces mounttest images used with agnhost (part 4)
2020-04-22 04:53:52 -07:00
Caleb Woodbine
9a53b0ec57 Add check for error in listing ServiceAccounts 2020-04-22 12:08:00 +12:00
Caleb Woodbine
c6e1701bda Add checks to watches; Update to patch different subproperty 2020-04-22 10:45:17 +12:00
Caleb Woodbine
e31baf82da Fix build 2020-04-16 17:52:10 +12:00
Caleb Woodbine
23d4367cff Add ServiceAccount resource lifecycle test 2020-04-16 16:34:59 +12:00
Andrew Sy Kim
2e56866c97 move apparmor annotation constants to k8s.io/api/core/v1
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-04-06 10:22:04 -04:00
Kubernetes Prow Robot
b7faac459f Merge pull request #89188 from tallclair/psp-tests
Move PSP tests behind a feature tag
2020-03-31 12:37:14 -07:00
drfish
dfab6b637f Update .import-aliases for e2e test framework 2020-03-25 11:40:02 +08:00
Tim Allclair
acf38c5f8a Move PSP tests behind a feature tag 2020-03-17 13:58:34 -07:00
Kubernetes Prow Robot
b30c9a3aba Merge pull request #88929 from liggitt/expansions
client-go: plumb context to expansions methods
2020-03-06 20:35:34 -08:00
Kubernetes Prow Robot
988982a1f7 Merge pull request #88048 from mtaufen/provider-info-e2etest
Add e2e test for validating JWTs as OIDC tokens
2020-03-06 17:59:34 -08:00
Jordan Liggitt
d8abacba40 client-go: update expansions callers 2020-03-06 16:50:41 -05:00
Mike Danese
76f8594378 more artisanal fixes
Most of these could have been refactored automatically but it wouldn't
have been uglier. The unsophisticated tooling left lots of unnecessary
struct -> pointer -> struct transitions.
2020-03-05 14:59:47 -08:00
Mike Danese
c58e69ec79 automated refactor 2020-03-05 14:59:46 -08:00
Charles Eckman
aee9fde751 Add e2e test for validating JWTs as OIDC tokens
Adds an E2E test to deploy an agnhost container that runs the test.

Co-authored-by: Michael Taufen <mtaufen@google.com>
2020-03-05 13:58:52 -08:00
Claudiu Belu
1b71b2a9a2 tests: Replaces mounttest images used with agnhost (part 4)
Quite a few images are only used a few times in a few tests. Thus,
the images are being centralized into the agnhost image, reducing
the number of images that have to be pulled and used.

This PR replaces the usage of the following images with agnhost:

- mounttest
- mounttest-user

Additionally, removes the usage of the mounttest-user image and removes
it from kubernetes/test/images. RunAsUser is set instead of having that image.
2020-02-29 15:05:57 -08:00
Jordan Liggitt
f205e3dd59 Use only v1 CRD resources in e2e tests 2020-02-29 17:34:26 -05:00
Davanum Srinivas
f26dbc473d Avoid running docker specific test in containerd 2020-02-11 14:32:18 -05:00