Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: adds script to setup OIDC issuer #1209

Merged
merged 1 commit into from Jan 30, 2024
Merged

Conversation

nilekhc
Copy link
Contributor

@nilekhc nilekhc commented Dec 14, 2023

Reason for Change:

This PR adds script to setup kind cluster for WI. This script does following:

  1. Setup storage account.
  2. Configure issuer url in kind config and create cluster.
    2.a The issuer url can be determined using the storage account and container name.
    2.b Let kubeadm generate the signing keys instead of pre-generating and mounting it.
  3. Get the public signing key from the cluster.
  4. Generate the JWKS using the public key and upload it to storage account.

Requirements

  • squashed commits
  • included documentation
  • added unit tests and e2e tests (if applicable).

Issue Fixed:

Please answer the following questions with yes/no:

Does this change contain code from or inspired by another project? If so, did you notify the maintainers and provide attribution?

  • yes
  • no

Notes for Reviewers:

@codecov-commenter
Copy link

codecov-commenter commented Dec 14, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (7b29880) 55.49% compared to head (7ae7e56) 55.49%.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1209   +/-   ##
=======================================
  Coverage   55.49%   55.49%           
=======================================
  Files          36       36           
  Lines        2294     2294           
=======================================
  Hits         1273     1273           
  Misses        980      980           
  Partials       41       41           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@aramase aramase left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added comments! Also need to fix shellcheck errors.

scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
@aramase
Copy link
Member

aramase commented Dec 14, 2023

cc @CecileRobertMichon

scripts/wi-setup.sh Outdated Show resolved Hide resolved
@CecileRobertMichon
Copy link

cc @mboersma

scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
Copy link
Member

@aramase aramase left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is close.

scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Show resolved Hide resolved
@aramase aramase changed the title feat: adds script to setup kind cluster for WI feat: adds script to setup OIDC issuer Jan 30, 2024
Copy link
Member

@aramase aramase left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@aramase
Copy link
Member

aramase commented Jan 30, 2024

@mboersma Could you take a look when you get a chance?

Copy link
Member

@mboersma mboersma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, I just had two minor comments.

scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
scripts/wi-kind-setup.sh Outdated Show resolved Hide resolved
@sozercan
Copy link
Member

fyi @jackfrancis

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
Copy link
Member

@mboersma mboersma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@aramase aramase merged commit 48f313e into Azure:main Jan 30, 2024
22 checks passed
@nilekhc nilekhc deleted the wi-setup branch February 1, 2024 18:35

LOCATION="${1}"
RESOURCE_GROUP="${2}"
AZURE_STORAGE_ACCOUNT="oidcissuer$(openssl rand -hex 4)"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need a new storage account each time? @aramase @nilekhc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants