Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for ACLs for sync catalog and partitions. #1180

Merged
merged 2 commits into from
Apr 29, 2022

Conversation

thisisnotashwin
Copy link
Contributor

Changes proposed in this PR:

  • Update rules.go to support partitions when Sync catalog is used.
  • Add an acceptance test to validate sync catalog works when partitions are enabled in the default and non-default partitions.

How I've tested this PR:

  • Units tests.
  • Acceptance tests.
    How I expect reviewers to test this PR:
  • Code Review.

Checklist:

  • Tests added
  • CHANGELOG entry added

    HashiCorp engineers only, community PRs should not add a changelog entry.
    Entries should use present tense (e.g. Add support for...)

@thisisnotashwin thisisnotashwin force-pushed the sync-partitions-acl branch 4 times, most recently from 2690246 to 837c9ce Compare April 20, 2022 17:36
@thisisnotashwin thisisnotashwin requested review from a team, curtbushko and t-eckert and removed request for a team April 20, 2022 17:41
@thisisnotashwin thisisnotashwin marked this pull request as ready for review April 20, 2022 17:42
@thisisnotashwin thisisnotashwin force-pushed the sync-partitions-acl branch 2 times, most recently from 622b0ee to f79d04f Compare April 20, 2022 19:24
Copy link
Contributor

@curtbushko curtbushko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Super nice! Acceptance tests are so great!

I only have one nit/question below but don't let it block the PR.

@thisisnotashwin thisisnotashwin force-pushed the sync-partitions-acl branch 2 times, most recently from fa7e353 to a146285 Compare April 20, 2022 20:12
Comment on lines +112 to +114
// On Kind, there are no load balancers but since all clusters
// share the same node network (docker bridge), we can use
// a NodePort service so that we can access node(s) in a different Kind cluster.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a great clarifying comment. 👍🏻

caKeySecretName := fmt.Sprintf("%s-consul-ca-key", releaseName)

logger.Logf(t, "retrieving ca cert secret %s from the server cluster and applying to the client cluster", caCertSecretName)
moveSecret(t, serverClusterContext, clientClusterContext, caCertSecretName)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know you didn't add this function, but I'm wondering if it might be clearer if it were called copySecret. "Move" makes me think that the original instance is no longer there.

Copy link
Contributor

@t-eckert t-eckert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@thisisnotashwin thisisnotashwin force-pushed the sync-partitions-acl branch 8 times, most recently from 82d0a90 to 80d802c Compare April 29, 2022 20:21
@thisisnotashwin thisisnotashwin merged commit d38019b into main Apr 29, 2022
@thisisnotashwin thisisnotashwin deleted the sync-partitions-acl branch April 29, 2022 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants