From 25e9877450eb2905afac1987261c5261f4eed758 Mon Sep 17 00:00:00 2001 From: Marco Kilchhofer Date: Fri, 14 Jul 2023 16:28:23 +0200 Subject: [PATCH] ci(helm chart): Also add testing for both other options --- .../metrics-server/ci/tls-custom-values.yaml | 85 +++++++++++++++++ .../ci/tls-existing-values.yaml | 93 +++++++++++++++++++ 2 files changed, 178 insertions(+) create mode 100644 charts/metrics-server/ci/tls-custom-values.yaml create mode 100644 charts/metrics-server/ci/tls-existing-values.yaml diff --git a/charts/metrics-server/ci/tls-custom-values.yaml b/charts/metrics-server/ci/tls-custom-values.yaml new file mode 100644 index 000000000..220ae7a81 --- /dev/null +++ b/charts/metrics-server/ci/tls-custom-values.yaml @@ -0,0 +1,85 @@ +args: + - --kubelet-insecure-tls + +apiService: + insecureSkipTLSVerify: false + # dummy certificate only (generated by cert-manager once) + caBundle: | + -----BEGIN CERTIFICATE----- + MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ + MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw + MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG + 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm + piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw + 2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj + rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG + SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O + 5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi + MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG + A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl + cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt + LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq + DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj + bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK + MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ + RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp + mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796 + ObtNgW0o + -----END CERTIFICATE----- + +tls: + type: secret + secret: + # dummy certificate only (generated by cert-manager once) + crt: | + -----BEGIN CERTIFICATE----- + MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ + MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw + MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG + 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm + piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw + 2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj + rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG + SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O + 5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi + MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG + A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl + cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt + LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq + DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj + bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK + MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ + RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp + mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796 + ObtNgW0o + -----END CERTIFICATE----- + + # dummy certificate only (generated by cert-manager once) + key: | + -----BEGIN RSA PRIVATE KEY----- + MIIEpAIBAAKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvmpiivnv9ltRAX + t7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw2fvIfWnKdzcq + d86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXjrjb8UNOjD/+Q + vGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvGSzI4MWXXGjfn + xtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O5sCUM8qGFQ5r + QO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABAoIBAQC1DgZI1S3dOWRf + 1tcWY1krP1iWvVI5pdy0vjC3Aq8qTkdvgZcVoRpAG4bkTQhd6pFr4UBfudm06zV0 + y2I/WjarKLj+U1zA1QLVkCx5J3F7vwsMmpD00ne5sLZD1DVv6mDENVAh7fB/NpyG + W33Ck0abwGloUWzaVF7Q1nTTBuYrEJmnLhgvWaUSv8KhcPko6uWLeuFCUaVarjaf + ghP1i1nA4ILXdHKWCZXSBxCH+EvWu68/avlfh4bptx7XmmPowayJQXvS1PK7WDg5 + QbT9RYG6Hy2l+okqdk/ikfQb3Bh0TR0W2XImxzuq3zRnT4mHSVzd1Xy6rMgrFZaq + Iy76eHnRAoGBAO9+ZQllDK1GHKdIJu0mamMraP8HovKU5jasNPPw1A/t3nTie8nw + xHqyDk69sdrxKqvnv76oS8gSGQRcnjFhf0u2BizuNnF8hKq1T5yPY6IiH317Pa8b + stGfcaZYy0uTKv3WCT/Jbhkl2j0MtAENz8GsYR9G5L9n4NuUkTOzVO11AoGBAOjS + DIOc18uH5JF9Cc4C3MHfK+6Rdeb/+7RVtOLmTP1T6UNXfcWgyb++IrhDtik1LlSt + D0M5rcFF6YsQMOiR6RmQRbBdH/nuwcR7Bmp4KcFVLMsSx/P2nJo0exifecBI2sXC + FhKWp/rKICSNPWpDjXUPpWjG04qHWiGcZsMXGGwvAoGBAKV6nQ9vveGf9z5ysUrd + Z1cccJD+0s1wqt0OAgyn068p+bKjp0ryTKBGlXI8yj5wsr5TA/8VxD76mkSURk3y + gwVqQTwcYIvrsLNPUjHoNbyafU2zsPxkVBtZYyrAYb/XcTYxBPUJFkTUDcZvF5U+ + 2NWGaRk2X+oNOaYfMnEZsU3dAoGAMjJnhFDirf1EqKGe5Y30btBhNnSiSQXUDROV + hn5FBzF6T4yjj2KVXQPvlG707XmL3bHaYpIjBlK+gb8h7GLZMSvL+rR5WnfBy00D + Gx2BUy+8EqSf+9el+BFsoOhxZaXPlWe9PpDA8u91cqwJG8ooy55t+WM05N897ZU9 + Cr8GAv0CgYBX/P0Ijw4x32Xb3y8uP3IaL9fHHBJZwuz0wVQlteNeV06gdlmp2NMs + 9dbs8jMztJLTQ6SGnVxiDZg+ZFPWFD5wmyRQG5dz/norpzp8QFuZVIkK3VfSVHgl + kFQUZ8+mby4FJDLcPIUccPd9xSOvF55zfSfsktLjMa232sPzrZqcLA== + -----END RSA PRIVATE KEY----- diff --git a/charts/metrics-server/ci/tls-existing-values.yaml b/charts/metrics-server/ci/tls-existing-values.yaml new file mode 100644 index 000000000..50536079c --- /dev/null +++ b/charts/metrics-server/ci/tls-existing-values.yaml @@ -0,0 +1,93 @@ +args: + - --kubelet-insecure-tls + +apiService: + insecureSkipTLSVerify: false + # same dummy certificate as we are using in tls-custom-values.yaml + caBundle: | + -----BEGIN CERTIFICATE----- + MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ + MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw + MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG + 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm + piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw + 2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj + rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG + SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O + 5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi + MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG + A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl + cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt + LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq + DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj + bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK + MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ + RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp + mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796 + ObtNgW0o + -----END CERTIFICATE----- + +tls: + type: existingSecret + existingSecret: + name: metrics-server-existing + +extraObjects: + # same dummy certificate as we are using in tls-custom-values.yaml + - apiVersion: v1 + kind: Secret + metadata: + name: metrics-server-existing + namespace: '{{ .Release.Namespace }}' + type: Opaque + stringData: + tls.crt: | + -----BEGIN CERTIFICATE----- + MIIDYjCCAkqgAwIBAgIQUK3jdPbBzeYoPwPg0WJZ/DANBgkqhkiG9w0BAQsFADAZ + MRcwFQYDVQQDEw5tZXRyaWNzLXNlcnZlcjAeFw0yMzA3MTQxMTA3MjBaFw0yMzEw + MTIxMTA3MjBaMBkxFzAVBgNVBAMTDm1ldHJpY3Mtc2VydmVyMIIBIjANBgkqhkiG + 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvm + piivnv9ltRAXt7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw + 2fvIfWnKdzcqd86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXj + rjb8UNOjD/+QvGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvG + SzI4MWXXGjfnxtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O + 5sCUM8qGFQ5rQO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABo4GlMIGi + MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMHMG + A1UdEQRsMGqCGm1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVtgh5tZXRyaWNzLXNl + cnZlci5rdWJlLXN5c3RlbS5zdmOCLG1ldHJpY3Mtc2VydmVyLmt1YmUtc3lzdGVt + LnN2Yy5jbHVzdGVyLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQC1d5rqbyDrlaNq + DlgX3W/fx6g4bioQRHOqswuM3KEwDHzIGfIki6K3+S7EGg8pGAQDqH4ckHmS1tbj + bcOTljpDqcNdlt5yKiZWt1VSECM0JhEpZ3jrFbJjp6l6YDbOx7KJHGCOirJ/aKCK + MMpp1Y5OsM+JJEMIMnFAcyl/eIet5t5+hUSQb+CMjrXnkdKITpaNOFsScRGQ2wBJ + RGzQds448r8YdLZPuipKLxkdtpCHLA32gT5QbCZnPe7F88hm2NAlbQN7hY2Ictqp + mzVO3OglgG1OS1glOL0niWUErK9PNfDjp7VMvpU3eIBH7lpwBAUvjtGHGlfWU796 + ObtNgW0o + -----END CERTIFICATE----- + tls.key: | + -----BEGIN RSA PRIVATE KEY----- + MIIEpAIBAAKCAQEA2c8M9HJtbRnrKQ60ChYfGguKUw1g2DLbFhvmpiivnv9ltRAX + t7WQos42alAm2PuR/sDRBcWH0+OD+u3Kf75kARZb95l/eEwH1Ntw2fvIfWnKdzcq + d86C3M4ywNiBQ8BbpT24XNiV6Hs12OwHeNHjXkUGx5ObCtxbkFXjrjb8UNOjD/+Q + vGQthrkAnJtPfnIKaInXc6/NwCtCTCdgcF1ut+FbWjePv9o0EHvGSzI4MWXXGjfn + xtFjmykzAXLfqJrXoMFF3ttUAmA7CQXOCJHUSAT6Pog7SnjSgh8O5sCUM8qGFQ5r + QO/6tBij7W/qK5/xP8gjjI6Qejh4F2eQhrz0ewIDAQABAoIBAQC1DgZI1S3dOWRf + 1tcWY1krP1iWvVI5pdy0vjC3Aq8qTkdvgZcVoRpAG4bkTQhd6pFr4UBfudm06zV0 + y2I/WjarKLj+U1zA1QLVkCx5J3F7vwsMmpD00ne5sLZD1DVv6mDENVAh7fB/NpyG + W33Ck0abwGloUWzaVF7Q1nTTBuYrEJmnLhgvWaUSv8KhcPko6uWLeuFCUaVarjaf + ghP1i1nA4ILXdHKWCZXSBxCH+EvWu68/avlfh4bptx7XmmPowayJQXvS1PK7WDg5 + QbT9RYG6Hy2l+okqdk/ikfQb3Bh0TR0W2XImxzuq3zRnT4mHSVzd1Xy6rMgrFZaq + Iy76eHnRAoGBAO9+ZQllDK1GHKdIJu0mamMraP8HovKU5jasNPPw1A/t3nTie8nw + xHqyDk69sdrxKqvnv76oS8gSGQRcnjFhf0u2BizuNnF8hKq1T5yPY6IiH317Pa8b + stGfcaZYy0uTKv3WCT/Jbhkl2j0MtAENz8GsYR9G5L9n4NuUkTOzVO11AoGBAOjS + DIOc18uH5JF9Cc4C3MHfK+6Rdeb/+7RVtOLmTP1T6UNXfcWgyb++IrhDtik1LlSt + D0M5rcFF6YsQMOiR6RmQRbBdH/nuwcR7Bmp4KcFVLMsSx/P2nJo0exifecBI2sXC + FhKWp/rKICSNPWpDjXUPpWjG04qHWiGcZsMXGGwvAoGBAKV6nQ9vveGf9z5ysUrd + Z1cccJD+0s1wqt0OAgyn068p+bKjp0ryTKBGlXI8yj5wsr5TA/8VxD76mkSURk3y + gwVqQTwcYIvrsLNPUjHoNbyafU2zsPxkVBtZYyrAYb/XcTYxBPUJFkTUDcZvF5U+ + 2NWGaRk2X+oNOaYfMnEZsU3dAoGAMjJnhFDirf1EqKGe5Y30btBhNnSiSQXUDROV + hn5FBzF6T4yjj2KVXQPvlG707XmL3bHaYpIjBlK+gb8h7GLZMSvL+rR5WnfBy00D + Gx2BUy+8EqSf+9el+BFsoOhxZaXPlWe9PpDA8u91cqwJG8ooy55t+WM05N897ZU9 + Cr8GAv0CgYBX/P0Ijw4x32Xb3y8uP3IaL9fHHBJZwuz0wVQlteNeV06gdlmp2NMs + 9dbs8jMztJLTQ6SGnVxiDZg+ZFPWFD5wmyRQG5dz/norpzp8QFuZVIkK3VfSVHgl + kFQUZ8+mby4FJDLcPIUccPd9xSOvF55zfSfsktLjMa232sPzrZqcLA== + -----END RSA PRIVATE KEY-----