Easwar Swaminathan
ca9102722d
Add bootstrap_generator to non-secure server deployments as well ( #26355 )
...
In gRPC-Go repo, as part of the PSM security interop tests, we changed
the xDS interop server to register admin services (in both secure and
non-secure modes). Attempting to register CSDS without an xds bootstrap
file causes the server binary to exit.
While we work to find a graceful solution to the problem of registering
CSDS without an xds bootstrap file, adding the bootstrap generator to
the non-secure server deployment fixes the issue.
Also, it looks like we would need an xds bootstrap file for non-secure
servers in the near future to test other server features.
4 years ago
Sergii Tkachenko
3ba36cc0c9
xds-k8s: add run and cleanup helpers, document bin/ scripts ( #26344 )
4 years ago
Lidi Zheng
0c5808603f
Add a flag to ensure firewall rule exists ( #26255 )
...
* Add CSDS validation ability to PSM Sec framework
* Add firewall create/delete functionality
* Polish the PR
* Re-number the sub tests
* Add a flag to ensure firewall rule exists
* Add ensure_firewall to local-dev.cfg.example
* Update the firewall creation interface
* Address comments
* Address comments
* Update the firewall script to run smoothly
* Polish firewall creation and deletion && address comments
* Update tools/run_tests/xds_k8s_test_driver/framework/xds_k8s_testcase.py
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
* Move allowed ports to cls property
* Improve readability & prevent attr error
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
4 years ago
Lidi Zheng
374e7b2cb4
Add CSDS validation ability to PSM Sec framework ( #26230 )
...
* Add CSDS validation ability to PSM Sec framework
* Add firewall create/delete functionality
* Polish the PR
* Re-number the sub tests
* Remove firewall create/delete ability
* Apply suggestions from code review
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
* Make Kokoro's yapf happy
* TIL how yapf and list-trailing-comma work
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
4 years ago
Lidi Zheng
0aecb90a9c
Add steps to run xDS in a non-exclusive project ( #26204 )
...
* Add steps to run xDS in a non-exclusive project
* Update tools/run_tests/xds_k8s_test_driver/README.md
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
* Update tools/run_tests/xds_k8s_test_driver/README.md
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
* Add .cfg and clean-up sections
* Use a newer commit hash
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
4 years ago
Sergii Tkachenko
d0256d9085
xds-k8s: retry tearDown multiple times, and doesn't fail test results ( #26104 )
4 years ago
Seth Vargo
3223b4fe98
Naming fix (secrets manager -> secret manager) ( #25990 )
4 years ago
Sergii Tkachenko
72632aebd7
xds-k8s: Use latest TD bootstrap supporting new secrets dir ( #25925 )
4 years ago
Sergii Tkachenko
9a2c2c0afc
xds-k8s: Update GKE workload certificates: fix annotation ( #25882 )
4 years ago
Sergii Tkachenko
1e065a0918
xds-k8s: Update Private CA GKE workload certificates config ( #25875 )
4 years ago
Sergii Tkachenko
5f8b529506
xds-k8s: Update to TD bootstrap with server_listener_resource_name_template support ( #25746 )
...
Related:
* https://github.com/GoogleCloudPlatform/traffic-director-grpc-bootstrap/pull/14
* https://github.com/grpc/grpc-java/pull/7978
4 years ago
Sergii Tkachenko
65ea33e427
xds-k8s Fix NameError name 'cls' is not defined ( #25615 )
4 years ago
Yash Tibrewal
44e5409a4e
Option to disable local_certificate check from PSM security tests ( #25595 )
...
* Remove local_certificate check from PSM security tests
* Reviewer comments
* Update tools/run_tests/xds_k8s_test_driver/framework/xds_k8s_testcase.py
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
* YAPF code
Co-authored-by: Sergii Tkachenko <hi@sergii.org>
4 years ago
Sergii Tkachenko
ee375222a0
Double WAIT_FOR_BACKEND_SEC ( #25603 )
4 years ago
Sergii Tkachenko
ad461a3c7c
xds-k8s: Update local-dev.cfg.example ( #25552 )
4 years ago
Sergii Tkachenko
900e47b1a9
xds-k8s: set GRPC_XDS_EXPERIMENTAL_NEW_SERVER_API ( #25529 )
4 years ago
Sergii Tkachenko
5426770c73
xds-k8s driver: remove "Client subchannel must have no sockets" check ( #25460 )
4 years ago
Sergii Tkachenko
e98cd15c2e
fixup! xds-k8s driver: switch Backend Health Check from TCP to GRPC
4 years ago
Sergii Tkachenko
21871dcb88
xds-k8s driver: switch Backend Health Check from TCP to GRPC
4 years ago
Sergii Tkachenko
a2aa83abe7
xds-k8s driver: increase timeouts for k8s cleanup operations
4 years ago
Sergii Tkachenko
6a294c38be
xds-k8s driver: Change Endpint Config Selector type to GRPC_SERVER
4 years ago
Sergii Tkachenko
bde2b79cbd
xds-k8s driver: wait server channelz - adjust RPC timeouts
4 years ago
Sergii Tkachenko
e0789a796b
xds-k8s driver: do not override wait for deployment timeout_sec
4 years ago
Sergii Tkachenko
e7616e56bd
xds-k8s driver: increase wait time for deployment available replicas
4 years ago
Hu Shuai
6c6926954d
Fix typo
...
Signed-off-by: Hu Shuai <hus.fnst@cn.fujitsu.com>
4 years ago
Sergii Tkachenko
8db79e2e71
Python style: reformat code using updated yapf 0.30.0
4 years ago
Sergii Tkachenko
d08468b844
xds-k8s driver: support --xds_server_uri flag
4 years ago
Sergii Tkachenko
a05a84b34b
xds-k8s driver: implement PSM security server-authz-error test
4 years ago
Sergii Tkachenko
fb50064d9c
xds-k8s driver: implement PSM security mtls_error test
4 years ago
Sergii Tkachenko
3b9899b769
xds-k8s driver: Use GRPC target proxy
4 years ago
Sergii Tkachenko
3b66fb6ead
xds-k8s driver: Improve logging INFO-level logging
4 years ago
Sergii Tkachenko
9e7dd53fac
fix imports order
4 years ago
Sergii Tkachenko
359974fd68
xds-k8s test runner: load API key from Cloud Secret Manager
4 years ago
Sergii Tkachenko
b675891164
xds k8s baseline test: add baseline subtest names to show their order
4 years ago
Sergii Tkachenko
ed69915394
Fix autorefactor error
4 years ago
Sergii Tkachenko
f1bf15afb4
PR Feedback: add missed todo
4 years ago
Sergii Tkachenko
424e4da676
PR feedback: rename xds_test_driver -> xds_k8s_test_driver
4 years ago