Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

integration test: mTLS for opaque TCP traffic #3515

Open
olix0r opened this issue Oct 2, 2019 · 3 comments
Open

integration test: mTLS for opaque TCP traffic #3515

olix0r opened this issue Oct 2, 2019 · 3 comments
Labels
area/identity Automatic transport identity area/telemetry area/test priority/P0 Release Blocker
Projects

Comments

@olix0r
Copy link
Member

olix0r commented Oct 2, 2019

Write an integration test that ensures that a client proxy records the proper metrics (i.e. reflecting mutual identity, pod metadata) when a client application makes an opaque TCP connection to a meshed server.

We should test at least:

  • Kubernetes Service IPs;
  • Individual pod IPs.
@olix0r olix0r added this to To do in moreTLS via automation Oct 2, 2019
@olix0r olix0r added area/identity Automatic transport identity area/telemetry area/test priority/P0 Release Blocker labels Oct 2, 2019
@krzysztofdrys
Copy link
Contributor

How is this different from the tests already present in test/integration/deep/opaqueports? 🤔 Aren't they doing exactly this?

@mateiidavid
Copy link
Member

Yeah I think you're right @krzysztofdrys, this seems to already be covered. We test that client apps have expected metrics. I'll go ahead and close this.

@mateiidavid
Copy link
Member

Well, seems that we were wrong :D The opaque ports tests we currently have all check whether an inbound TCP connection has been opened on the server. We can probably do the same for clients to be sure outbound conn metrics are properly recorded. Going to re-open this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/identity Automatic transport identity area/telemetry area/test priority/P0 Release Blocker
Projects
No open projects
moreTLS
  
To do
Development

No branches or pull requests

3 participants