Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RELEASE-1.14] Incorporate upstream encryption changes to Serving #702

Merged
merged 10 commits into from
May 30, 2024

Conversation

ReToCode
Copy link
Member

@ReToCode ReToCode commented May 2, 2024

Fixes JIRA https://issues.redhat.com/browse/SRVKS-1198

Changes

  • Rename ENABLE_INTERNAL_TLS -> ENABLE_TLS
  • Use the new flags cluster-local-domain-tls and system-internal-tls
  • Drop old, now unused configs/secrets
  • Run upstream tests clusterlocaldomaintls and systeminternaltls
  • Add patches to make these tests run on OCP

Patches will be ported to main on a separate PR.

@ReToCode
Copy link
Member Author

ReToCode commented May 8, 2024

/test 415-test-e2e-tls-aws-415

@ReToCode
Copy link
Member Author

error: error creating buildah builder: initializing source docker://image-registry.openshift-image-registry.svc:5000/ci-op-c2rfk5b1/pipeline@sha256:c359660be15f1f68f72aa16d5c55e0069562793b913b6a751172c3e26c880c01: pinging container registry image-registry.openshift-image-registry.svc:5000: Get "https://image-registry.openshift-image-registry.svc:5000/v2/": dial tcp: lookup image-registry.openshift-image-registry.svc on 172.30.0.10:53: no such host

/test 415-test-e2e-tls-aws-415

@ReToCode
Copy link
Member Author

  • could not run steps: step test-e2e-tls-aws-415 failed: failed to wait for the created cluster claim to become ready: timed out waiting for the condition

/test 415-test-e2e-tls-aws-415

export CA_CERT=ca-cert
# This needs to match $san from test/config/tls/generate.sh
export SERVER_NAME=knative.dev
fi
}

function run_e2e_tests(){
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Curious if you want to enable tests from ./test/e2e/systeminternaltls or what's the plan for those tests? I want to add the test for certificate rotation there.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea, I'll take a look.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's see if that works out. We'll need patches for the tests, as OCP is a bit different. But we need to wait for knative#15217, otherwise we'll have to do it twice.

@ReToCode ReToCode changed the title [test-only] Incorporate upstream encryption changes to Serving May 23, 2024
@skonto
Copy link

skonto commented May 27, 2024

/test 415-test-e2e-tls-aws-415

1 similar comment
@ReToCode
Copy link
Member Author

/test 415-test-e2e-tls-aws-415

@ReToCode
Copy link
Member Author

Not sure if we really have test failures, IMHO we just time out:

=== Failed
=== FAIL: test/e2e/clusterlocaldomaintls (0.00s)
panic: test timed out after 2m0s

=== Failed
=== FAIL: test/e2e (0.00s)
panic: test timed out after 30m0s

@ReToCode
Copy link
Member Author

@skonto @mgencur PTAL.

@ReToCode
Copy link
Member Author

/unhold

openshift/e2e-common.sh Outdated Show resolved Hide resolved
@ReToCode ReToCode changed the title Incorporate upstream encryption changes to Serving [RELEASE-1.14] Incorporate upstream encryption changes to Serving May 29, 2024
@ReToCode
Copy link
Member Author

/hold we need #732 first (as it changes the patch).

@mgencur
Copy link

mgencur commented May 29, 2024

LGTM

@skonto
Copy link

skonto commented May 30, 2024

/lgtm

Copy link

openshift-ci bot commented May 30, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ReToCode, skonto

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ReToCode
Copy link
Member Author

/unhold

@openshift-merge-bot openshift-merge-bot bot merged commit ff14af6 into openshift-knative:release-v1.14 May 30, 2024
7 checks passed
ReToCode added a commit to ReToCode/serving that referenced this pull request Aug 9, 2024
openshift-merge-bot bot pushed a commit that referenced this pull request Aug 9, 2024
openshift-cherrypick-robot pushed a commit to openshift-cherrypick-robot/knative-serving that referenced this pull request Aug 9, 2024
openshift-merge-bot bot pushed a commit that referenced this pull request Sep 23, 2024
* Add missing changes from #702

* Fix e2e-tls tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants