-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test: enable hubble tls in ci #13232
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Awesome! It's nice that all it takes to enable TLS in the CI is to remove global.hubble.tls.enabled=false
!
fdd057a
to
092c0cd
Compare
test-me-please |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM overall, just a few minor comments.
092c0cd
to
eaf1a7b
Compare
Signed-off-by: Alexandre Perrin <alex@kaworu.ch>
Signed-off-by: Alexandre Perrin <alex@kaworu.ch>
test-me-please |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Thanks for adding those extra pieces, makes the tests more readable.
expected := string(res.GetStdOut().Bytes()) | ||
|
||
serverName := fmt.Sprintf("%s.default.hubble-grpc.cilium.io", helpers.K8s1) | ||
cmd := helpers.OpenSSLShowCerts("localhost", defaults.ServerPort, serverName) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this is a nice change as well!
// ReadFile returns the string representing a cat command to read the file at | ||
// the give path. | ||
func ReadFile(path string) string { | ||
return fmt.Sprintf("cat %q", path) | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for adding the helpers!
Enable TLS for Hubble and verify that the expected certificate is served.