Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 1750338: improve permissions simulation by adding region info #124

Merged
merged 1 commit into from Feb 4, 2020

Conversation

joelddiaz
Copy link
Contributor

@joelddiaz joelddiaz commented Oct 14, 2019

Allow providing an aws region to be used when performing the simulations.

IAM permissions can be defined in a way where permissions are granted as long as the region is set to some specific region(s). Add region info when simulating permissions testing so that we avoid false failures (ie we claim permission denied when it would actually work with an acceptable region set).

@openshift-ci-robot openshift-ci-robot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Oct 14, 2019
@dgoodwin
Copy link
Contributor

Looks fine I would just expand on the commit message to clarify what it helps and what it doesn't. I assume adding this information is safe and doesn't require us to do both a simulate call with region, and a call without?

@joelddiaz
Copy link
Contributor Author

Looks fine I would just expand on the commit message to clarify what it helps and what it doesn't. I assume adding this information is safe and doesn't require us to do both a simulate call with region, and a call without?

Right. We're just making the simulation more accurate when compared with the actual calls that we expect will be performed.

@dgoodwin
Copy link
Contributor

/lgtm

@openshift-ci-robot openshift-ci-robot added lgtm Indicates that a PR is ready to be merged. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed lgtm Indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Jan 31, 2020
@joelddiaz
Copy link
Contributor Author

@dgoodwin i defined some test cases to ensure we are using the region as part of our permissions simulations (let me know if you want the commit squashed)

@joelddiaz joelddiaz changed the title WIP: allow adding region info when simulating permissions allow adding region info when simulating permissions Jan 31, 2020
@openshift-ci-robot openshift-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 31, 2020
@dgoodwin
Copy link
Contributor

Commit title is a little generic, lets squash. Thanks!

Allow providing an aws region to be used when performing the simulations.

IAM permissions can be defined in a way where permissions are granted as long as the region is set to some specific region(s). Add region info when simulating permissions testing so that we avoid false failures (ie we claim permission denied when it would actually work with an acceptable region set).
@joelddiaz joelddiaz changed the title allow adding region info when simulating permissions improve permissions simulation by adding region info Jan 31, 2020
@joelddiaz
Copy link
Contributor Author

/test e2e-aws-upgrade

@joelddiaz
Copy link
Contributor Author

/test e2e-aws

@dgoodwin
Copy link
Contributor

dgoodwin commented Feb 3, 2020

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Feb 3, 2020
@openshift-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dgoodwin, joelddiaz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@sdodson
Copy link
Member

sdodson commented Feb 4, 2020

/retitle Bug 1750338: improve permissions simulation by adding region info

@openshift-ci-robot openshift-ci-robot changed the title improve permissions simulation by adding region info Bug 1750338: improve permissions simulation by adding region info Feb 4, 2020
@openshift-ci-robot openshift-ci-robot added the bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. label Feb 4, 2020
@openshift-ci-robot
Copy link
Contributor

@joelddiaz: This pull request references Bugzilla bug 1750338, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

Bug 1750338: improve permissions simulation by adding region info

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-bot
Copy link
Contributor

/retest

Please review the full test history for this PR and help us cut down flakes.

@openshift-merge-robot openshift-merge-robot merged commit a443c1b into openshift:master Feb 4, 2020
@openshift-ci-robot
Copy link
Contributor

@joelddiaz: All pull requests linked via external trackers have merged. Bugzilla bug 1750338 has been moved to the MODIFIED state.

In response to this:

Bug 1750338: improve permissions simulation by adding region info

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@joelddiaz
Copy link
Contributor Author

/cherry-pick release-4.3

@openshift-cherrypick-robot

@joelddiaz: new pull request created: #155

In response to this:

/cherry-pick release-4.3

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@joelddiaz
Copy link
Contributor Author

/cherry-pick release-4.2

@openshift-cherrypick-robot

@joelddiaz: new pull request created: #157

In response to this:

/cherry-pick release-4.2

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. lgtm Indicates that a PR is ready to be merged. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants