Skip to content

Commit

Permalink
[KRV-24554] Add auth CRDs step to the scenarios
Browse files Browse the repository at this point in the history
  • Loading branch information
EvgenyUglov committed Jun 10, 2024
1 parent 807c5af commit d8bcb3a
Show file tree
Hide file tree
Showing 6 changed files with 153 additions and 19 deletions.
2 changes: 1 addition & 1 deletion tests/e2e/steps/steps_def.go
Original file line number Diff line number Diff line change
Expand Up @@ -1039,7 +1039,7 @@ func (step *Step) configureAuthorizationProxyServer(res Resource, driver string,
}

fmt.Printf("=== Generating Admin Token ===\n")
adminTkn := exec.Command("karavictl",
adminTkn := exec.Command("dellctl",
"admin", "token",
"--name", "Admin",
"--jwt-signing-secret", "secret",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,11 +42,18 @@ spec:
# enable: Enable/Disable csm-authorization proxy server
enabled: true
proxyService: dellemc/csm-authorization-proxy:v2.0.0-alpha
proxyServiceReplicas: 1
tenantService: dellemc/csm-authorization-tenant:v2.0.0-alpha
tenantServiceReplicas: 1
roleService: dellemc/csm-authorization-role:v2.0.0-alpha
roleServiceReplicas: 1
storageService: dellemc/csm-authorization-storage:v2.0.0-alpha
storageServiceReplicas: 1
opa: openpolicyagent/opa
opaKubeMgmt: openpolicyagent/kube-mgmt:0.11
authorizationController: dellemc/csm-authorization-controller:v2.0.0-alpha
authorizationControllerReplicas: 1
leaderElection: true

# certificate: base64-encoded certificate for cert/private-key pair -- add certificate here to use custom certificates
# for self-signed certs, leave empty string
Expand Down Expand Up @@ -92,6 +99,18 @@ spec:
vaultRole: csm-authorization
skipCertificateValidation: true
kvEnginePath: secret
# certificate: base64-encoded certificate for cert/private-key pair -- add cert here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificate: ""
# privateKey: base64-encoded private key for cert/private-key pair -- add private key here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
privateKey: ""
# certificateAuthority: base64-encoded certificate authority for validating vault server certificate -- add certificate authority here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificateAuthority: ""

---
apiVersion: v1
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,11 +42,18 @@ spec:
# enable: Enable/Disable csm-authorization proxy server
enabled: true
proxyService: dellemc/csm-authorization-proxy:v2.0.0-alpha
proxyServiceReplicas: 1
tenantService: dellemc/csm-authorization-tenant:v2.0.0-alpha
tenantServiceReplicas: 1
roleService: dellemc/csm-authorization-role:v2.0.0-alpha
roleServiceReplicas: 1
storageService: dellemc/csm-authorization-storage:v2.0.0-alpha
storageServiceReplicas: 1
opa: openpolicyagent/opa
opaKubeMgmt: openpolicyagent/kube-mgmt:0.11
authorizationController: dellemc/csm-authorization-controller:v2.0.0-alpha
authorizationControllerReplicas: 1
leaderElection: true

# certificate: base64-encoded certificate for cert/private-key pair -- add certificate here to use custom certificates
# for self-signed certs, leave empty string
Expand Down Expand Up @@ -75,14 +82,36 @@ spec:
annotations: {}

- name: redis
redis: redis:6.0.8-alpine
redis: redis:7.2.4-alpine
commander: rediscommander/redis-commander:latest
# by default, csm-authorization will deploy a local (https://kubernetes.io/docs/concepts/storage/storage-classes/#local) volume for redis
# to use a different storage class for redis, specify the name of the storage class
# NOTE: the storage class must NOT be a storage class provisioned by a CSI driver using this installation of CSM Authorization
# Default value: None
redisName: redis-csm
redisCommander: redicommander
sentinel: sentinel
redisReplicas: 5
storageclass: ""

- name: vault
vaultAddress: https://10.247.100.22:8400
vaultRole: csm-authorization
skipCertificateValidation: true
kvEnginePath: secret
# certificate: base64-encoded certificate for cert/private-key pair -- add cert here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificate: ""
# privateKey: base64-encoded private key for cert/private-key pair -- add private key here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
privateKey: ""
# certificateAuthority: base64-encoded certificate authority for validating vault server certificate -- add certificate authority here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificateAuthority: ""

---
apiVersion: v1
kind: ConfigMap
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,11 +42,18 @@ spec:
# enable: Enable/Disable csm-authorization proxy server
enabled: true
proxyService: dellemc/csm-authorization-proxy:v2.0.0-alpha
proxyServiceReplicas: 1
tenantService: dellemc/csm-authorization-tenant:v2.0.0-alpha
tenantServiceReplicas: 1
roleService: dellemc/csm-authorization-role:v2.0.0-alpha
roleServiceReplicas: 1
storageService: dellemc/csm-authorization-storage:v2.0.0-alpha
storageServiceReplicas: 1
opa: openpolicyagent/opa
opaKubeMgmt: openpolicyagent/kube-mgmt:0.11
authorizationController: dellemc/csm-authorization-controller:v2.0.0-alpha
authorizationControllerReplicas: 1
leaderElection: true

# certificate: base64-encoded certificate for cert/private-key pair -- add certificate here to use custom certificates
# for self-signed certs, leave empty string
Expand Down Expand Up @@ -92,6 +99,18 @@ spec:
vaultRole: csm-authorization
skipCertificateValidation: true
kvEnginePath: secret
# certificate: base64-encoded certificate for cert/private-key pair -- add cert here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificate: ""
# privateKey: base64-encoded private key for cert/private-key pair -- add private key here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
privateKey: ""
# certificateAuthority: base64-encoded certificate authority for validating vault server certificate -- add certificate authority here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificateAuthority: ""

---
apiVersion: v1
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,11 +42,18 @@ spec:
# enable: Enable/Disable csm-authorization proxy server
enabled: true
proxyService: dellemc/csm-authorization-proxy:v2.0.0-alpha
proxyServiceReplicas: 1
tenantService: dellemc/csm-authorization-tenant:v2.0.0-alpha
tenantServiceReplicas: 1
roleService: dellemc/csm-authorization-role:v2.0.0-alpha
roleServiceReplicas: 1
storageService: dellemc/csm-authorization-storage:v2.0.0-alpha
storageServiceReplicas: 1
opa: openpolicyagent/opa
opaKubeMgmt: openpolicyagent/kube-mgmt:0.11
authorizationController: dellemc/csm-authorization-controller:v2.0.0-alpha
authorizationControllerReplicas: 1
leaderElection: true

# certificate: base64-encoded certificate for cert/private-key pair -- add certificate here to use custom certificates
# for self-signed certs, leave empty string
Expand Down Expand Up @@ -75,14 +82,36 @@ spec:
annotations: {}

- name: redis
redis: redis:6.0.8-alpine
redis: redis:7.2.4-alpine
commander: rediscommander/redis-commander:latest
# by default, csm-authorization will deploy a local (https://kubernetes.io/docs/concepts/storage/storage-classes/#local) volume for redis
# to use a different storage class for redis, specify the name of the storage class
# NOTE: the storage class must NOT be a storage class provisioned by a CSI driver using this installation of CSM Authorization
# Default value: None
redisName: redis-csm
redisCommander: redicommander
sentinel: sentinel
redisReplicas: 5
storageclass: "local-storage"

- name: vault
vaultAddress: https://10.0.0.1:8400
vaultRole: csm-authorization
skipCertificateValidation: true
kvEnginePath: secret
# certificate: base64-encoded certificate for cert/private-key pair -- add cert here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificate: ""
# privateKey: base64-encoded private key for cert/private-key pair -- add private key here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
privateKey: ""
# certificateAuthority: base64-encoded certificate authority for validating vault server certificate -- add certificate authority here to use custom certificates
# for self-signed certs, leave empty string
# Allowed values: string
certificateAuthority: ""

---
apiVersion: v1
kind: ConfigMap
Expand Down
Loading

0 comments on commit d8bcb3a

Please sign in to comment.