Commit Graph

93 Commits (73c2daeeeadb5d91b8480205e6317537e8d00159)

Author SHA1 Message Date
Kubernetes Prow Robot 80bbb0cde1
Merge pull request #77093 from oomichi/use-ExpectError-e2e-auth
Use framework.ExpectNoError() for e2e/auth
2019-05-04 13:47:37 -07:00
Jorge Alarcon Ochoa dc619067d9 Refeactored framework deployment utils
This is the continuation of the refactoring of framework/deployment_utils.go
into framework/deployment.

Signed-off-by: Jorge Alarcon Ochoa <alarcj137@gmail.com>
2019-05-03 18:00:53 -04:00
John Schnake 0c62f751b6 Move auth and network tests to use framework/log
This is part of the transition to using framework/log instead
of the Logf inside the framework package. This will help with
import size/cycles when importing the framework or subpackages.
2019-05-03 08:41:21 -05:00
Kenichi Omichi a6039c46e5 Use framework.ExpectNoError() for e2e/auth
The e2e test framework has ExpectNoError() for readable test code.
This replaces Expect(err).NotTo(HaveOccurred()) with it for e2e/auth.
2019-04-25 20:23:28 +00:00
John Schnake 028df0451d Refactor of e2e/framework/authorizer_util.go
- moves these helper functions into e2e/framework/auth
 - removes logging from helper functions
 - in some cases explicitly returns errors that were implicitly
ignored/logged. In the situations where they should be ignored,
we explicitly check that the condition is met before ignoring it.
 - fixes references of these methods to use the right package and
return values
2019-04-17 16:39:37 -05:00
draveness f32352ac7e refactor: clean up e2e framework job utils
1. Move job_util to e2e/framework/job package
2. Remove unused UpdateJobWithFunc
2019-04-12 21:26:33 +08:00
Lubomir I. Ivanov 76906dd738 test: partially decouple from cmd/kubeadm
The test package imports cmd/kubeadm, which is far from ideal.
There are a couple of reasons for the import:
1) Marshaling of Ingress from api/extensions/v1beta1.

To fix that include a local function in e2e/manifest/manifest.go
that does that same as the kubeadm MarshalToYaml.

2) Using PKI helper function in apimachinery and auth tests.

To fix that include a new file under test/utils/pki_helpers.go
that only contains the required helpers instead of including the whole
kubeadm pkiutil package.

There is another related problem:
e2e_node/e2e_node_suite_test.go includes:
k8s.io/kubernetes/cmd/kubeadm/app/util/system

But this has to be done in a follow up.
2019-04-04 15:41:28 +03:00
Jordan Liggitt cacafc1947 Mark audit e2e tests as flaky 2019-03-18 14:59:37 -04:00
Mayank Kumar c4e0ede58b add missing psp e2e tests for runasgroup 2019-03-12 22:07:07 -07:00
Patrick Barker 898700d104 removes cluster type restrictions from dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Patrick Barker 718a747961 fix missing event report handling in dynamic audit e2e 2019-03-05 14:38:58 -07:00
Patrick Barker 62edfe8d97 adds owner of TODO comments in dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Patrick Barker db1207c646 adds better logging around retry loops in dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Patrick Barker 67a245ae61 remove unneeded println 2019-03-05 14:38:58 -07:00
Patrick Barker 45d715cdc6 adds dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Kubernetes Prow Robot b5566c7818
Merge pull request #71896 from awly/client-go-keyutil
client-go: extract new keyutil package from util/cert
2019-02-23 01:43:16 -08:00
Patrick Barker 9e4f8d6fae Audit test utils fix (#74276)
* changes audit e2e event version scheme; adds internal audit to common audit scheme; removes unneeded comments

* add more detail to audit missing events in e2e/integration tests

* adds version priority to audit scheme; updates comment
2019-02-22 00:19:51 -08:00
Andrew Lytvynov 18458392ca Extract new keyutil package from client-go/util/cert
This package contains public/private key utilities copied directly from
client-go/util/cert. All imports were updated.

Future PRs will actually refactor the libraries.

Updates #71004
2019-02-19 09:48:59 -08:00
Roy Lenferink b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
mourya007 7c37e91a6d Re-Organize the pkutil library 2019-01-26 14:56:36 +05:30
Kubernetes Prow Robot 6a8ad537a7
Merge pull request #72688 from liggitt/token-test
Update service account token mount test
2019-01-10 14:42:51 -08:00
Kubernetes Prow Robot 8955857998
Merge pull request #71199 from k-toyoda-pi/fix_node_authn_e2e_test
e2e/auth: fix NodeAuthenticator tests not working
2019-01-10 02:31:28 -08:00
Jordan Liggitt 421d8649bf Update service account token mount test 2019-01-08 11:27:51 -05:00
Tim Allclair 10f45aacd5 Split audit test cases into separate tests 2018-12-18 16:58:19 -08:00
Dennis Czombera f9df691c72 Add an impersonation test case to the audit E2E test 2018-12-18 11:13:39 +01:00
toyoda 52959b4bcb e2e/auth: fix NodeAuthenticator tests not working 2018-11-19 15:40:17 +09:00
David Eads 9b31985b08 fix client-side specification of timeout now that it is honored 2018-11-16 11:43:37 -05:00
k8s-ci-robot fb6716e83c
Merge pull request #67495 from islinwb/policy_psp
use PodSecurityPolicySpec of policy/v1beta1 instead of extensions/v1beta1
2018-10-29 08:31:15 -07:00
Pradip-Khakurel 8c4fd312c9 make error messages more helpful for some e2e auth tests 2018-10-18 22:03:02 +02:00
Weibin Lin e81776b140 update bazel 2018-10-18 10:18:15 +08:00
Weibin Lin d02e3bd780 use PodSecurityPolicySpec of policy/v1beta1 instead of extensions/v1beta1 2018-10-18 10:18:13 +08:00
Eric Chiang 766f5875bf Remove ericchiang from OWNERS files
Kept myself in the OpenID Connect ones for now.
2018-10-11 18:11:15 -07:00
Janet Kuo 0a6389e872 Add e2e test for TTL after finished 2018-09-04 14:21:14 -07:00
Kubernetes Submit Queue a224e53dab
Merge pull request #66842 from hanxiaoshuai/cleanup0801
Automatic merge from submit-queue (batch tested with PRs 65297, 67179, 67116, 67011, 66842). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

clean up unused parameter in func restrictedPod and testPrivilegedPods

**What this PR does / why we need it**:
clean up unused parameter in func restrictedPod and testPrivilegedPods
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:
/kind cleanup
**Release note**:

```release-note
NONE
```
2018-08-09 08:39:41 -07:00
Kubernetes Submit Queue 28b2b21287
Merge pull request #65891 from CaoShuFeng/audit_v1_stable
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

upgrade Audit api version to stable

Partial Fix: https://github.com/kubernetes/kubernetes/issues/65266

TODO:
    use v1 version of advanced audit policy in [kubeadm](86b9a53226/cmd/kubeadm/app/util/audit/utils.go (L29)), [gce script](86b9a53226/cluster/gce/gci/configure-helper.sh (L743)), [kubemark](86b9a53226/test/kubemark/resources/start-kubemark-master.sh (L349))



**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
audit.k8s.io api group is upgraded from v1beta1 to v1.
Deprecated element metav1.ObjectMeta and Timestamp are removed from audit Events in v1 version.
Default value of option --audit-webhook-version and --audit-log-version will be changed from `audit.k8s.io/v1beta1` to `audit.k8s.io/v1` in release 1.13
```
2018-08-08 02:17:24 -07:00
hangaoshuai 7e61ea9e72 clean up unused parameter in func restrictedPod and testPrivilegedPods 2018-08-01 09:55:39 +08:00
hangaoshuai e0796ab913 should get return err and check it 2018-08-01 09:34:41 +08:00
Cao Shufeng 858e4508c4 add an integration test for advanced audit feature 2018-07-31 11:10:51 +08:00
stewart-yu f1343af5d7 auto-generated file 2018-07-28 07:54:17 +08:00
stewart-yu 55251c716a update the import file for move util/pointer to k8s.io/utils 2018-07-27 19:47:02 +08:00
Srini Brahmaroutu dbeb16c221 Adding details to Conformance Tests using RFC 2119 standards. 2018-07-05 16:02:59 -07:00
Dr. Stefan Schimanski 42f1e81488 apiextensions-apiserver: add pkg/cmd/server/testing pkg for integration bootstrapping
In analogy to kube-apiserver.
2018-07-05 17:34:16 +02:00
Jeff Grafton 23ceebac22 Run hack/update-bazel.sh 2018-06-22 16:22:57 -07:00
Di Xu 924df8a111 auto-generated files 2018-06-12 17:05:27 +08:00
Di Xu 8094e1c681 add e2e regression tests for the kubelet being secure 2018-06-12 17:05:27 +08:00
Kubernetes Submit Queue deb632e727
Merge pull request #64204 from sttts/sttts-unify-NewNoxuInstance
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

apiextensions: unify mono- and multi-versioned test helpers

The mono-versioned helpers are a special case of the multi-versioned ones.

Fixes part of https://github.com/kubernetes/kubernetes/issues/64136.
2018-05-25 04:49:37 -07:00
Dr. Stefan Schimanski 818147d6fb apiextensions: make CreateNewCustomResourceDefinition return created CRD 2018-05-23 21:41:55 +02:00
Anthony Yeh 046ae81e35
e2e/auth: Expect apps/v1 Deployment calls in audit test. 2018-05-22 13:43:07 -07:00
Anthony Yeh a6a5190494
test/e2e: Use apps/v1 Deployment/ReplicaSet.
This must be done at the same time as the controller update,
since they share code.
2018-05-22 13:43:06 -07:00
Kubernetes Submit Queue b75d6464c8
Merge pull request #63189 from hzxuzhonghu/master
Automatic merge from submit-queue (batch tested with PRs 61804, 63189). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

make use of simple dynamic client instead of deprecated client pool

**What this PR does / why we need it**:

Use simple dynamic client through all integration test.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63182

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-04-27 08:44:07 -07:00