Commit Graph

15 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
19935de5a9
Merge pull request #107410 from margocrawf/master
Ensure static certs in kubeconfig override exec plugin
2022-03-08 11:34:21 -08:00
Margo Crawford
f015fd66ce Check whether static cert is already configured in UpdateTransportConfig
- Also update test-cmd.sh to pass a signing ca to the kube controller
  manager, so CSRs work properly in integration tests.

Signed-off-by: Margo Crawford <margaretc@vmware.com>
2022-03-07 13:54:32 -08:00
ahrtr
fe95aa614c io/ioutil has already been deprecated in golang 1.16, so replace all ioutil with io and os 2022-02-03 05:32:12 +08:00
Monis Khan
a6ac42082b
client-go exec: fix metrics related to plugin not found
These were missed because our tests did not pass in the correct test
data input (the command to execute).

Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-14 14:02:23 -04:00
Andrew Keesler
20e1c4d754
exec credential provider: update tests+metadata for v1
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-06 09:48:35 -04:00
Andrew Keesler
cd83d89ac9
exec credential provider: InteractiveMode support
The value here is that the exec plugin author can use the kubeconfig to assert
how standard input is treated with respect to the exec plugin, e.g.,
- an exec plugin author can ensure that kubectl fails if it cannot provide
  standard input to an exec plugin that needs it (Always)
- an exec plugin author can ensure that an client-go process will still call an
  exec plugin that prefers standard input even if standard input is not
  available (IfAvailable)

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-06-15 09:01:17 -04:00
pacoxu
64946cd50d fix flake integration rotation via informer
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-06-07 15:44:53 +08:00
Kubernetes Prow Robot
661b76f864
Merge pull request #102216 from enj/enj/t/exec_global_cache
Add integration test for exec plugin global cache
2021-05-21 16:41:37 -07:00
Monis Khan
a45ffd0771
Add integration test for exec plugin global cache
Signed-off-by: Monis Khan <mok@vmware.com>
2021-05-21 16:17:32 -04:00
Andrew Keesler
9dee2b95c2
exec credential provider: don't run exec plugin with basic auth
If a user specifies basic auth, then apply the same short circuit logic
that we do for bearer tokens (see comment).

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-05-21 13:51:03 -04:00
Andrew Keesler
584acb2cfe
test/integration/client: test exec calls metric
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-05-21 09:20:47 -04:00
Andrew Keesler
a14cd8e3de
test/integration/client: add TestExecPluginRotationViaInformer
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-05-17 17:22:09 -04:00
Andrew Keesler
d00202bd3e
exec credential provider: informer happy path integration test
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-04-07 14:46:40 -04:00
Andrew Keesler
c984a1c834
test/integration/client: ditch unused code
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-04-06 09:40:57 -04:00
Andrew Keesler
8834aa133c
exec credential provider: first integration test (static auth interaction)
I also added some simple happy/sad path tests so we get some coverage at the
integration level.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-03-01 14:33:48 -05:00