Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

helm mode: Add external workloads test coverage #1640

Merged
merged 2 commits into from
May 19, 2023
Merged

Conversation

michi-covalent
Copy link
Contributor

Ref: #1625

@michi-covalent
Copy link
Contributor Author

it's failing in helm mode because clustermesh-apiserver-external-workload-cert doesn't exist:

func (k *K8sClusterMesh) createClusterMeshExternalWorkloadCertificate(ctx context.Context) error {

need to look into whether this is configurable via helm 👀

@michi-covalent michi-covalent temporarily deployed to ci May 18, 2023 00:05 — with GitHub Actions Inactive
@michi-covalent michi-covalent temporarily deployed to ci May 18, 2023 01:20 — with GitHub Actions Inactive
@michi-covalent
Copy link
Contributor Author

https://github.com/cilium/cilium-cli/actions/runs/5009483637/jobs/8978707657?pr=1640

removing the temporary commit and marking it ready for review

@michi-covalent michi-covalent temporarily deployed to ci May 18, 2023 02:57 — with GitHub Actions Inactive
@michi-covalent michi-covalent marked this pull request as ready for review May 18, 2023 02:57
@michi-covalent michi-covalent requested review from a team as code owners May 18, 2023 02:57
clustermesh/certs.go Show resolved Hide resolved
clustermesh/clustermesh.go Outdated Show resolved Hide resolved
@michi-covalent
Copy link
Contributor Author

✅ successful run: https://github.com/cilium/cilium-cli/actions/runs/5018586743?pr=1640 removing the temporary commit.

Copy link
Member

@giorio94 giorio94 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

internal/cli/cmd/clustermesh.go Outdated Show resolved Hide resolved
michi-covalent and others added 2 commits May 19, 2023 15:44
Add --enable-external-workloads flag to "clustermesh enable" command to
set externalWorkloads.enabled to true. With this Helm value set to true,
clustermesh-apiserver-client-cert secret gets created. This certificate
is used by external workloads.

The certificate name is clustermesh-apiserver-external-workload-cert in
classic mode for some reason. Add getExternalWorkloadCertName() function
that returns the correct cert name depending on which mode the CLI is
in.

Co-authored-by: Marco Iorio <marco.iorio@isovalent.com>
Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
Ref: #1625

Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
@michi-covalent michi-covalent temporarily deployed to ci May 19, 2023 15:45 — with GitHub Actions Inactive
Copy link
Member

@asauber asauber left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the updates

@michi-covalent michi-covalent merged commit 92268c4 into main May 19, 2023
18 checks passed
@michi-covalent michi-covalent deleted the pr/michi/external branch May 19, 2023 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants