-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Set KUBE_SSH_BASTION and KUBE_SSH_KEY_PATH in installer tests #2469
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Set KUBE_SSH_BASTION and KUBE_SSH_KEY_PATH in installer tests #2469
Conversation
We will start using the bastion to do tunneling to workers via SSH tests in 4.0. Leave all existing variables in place. Fix a few places of config drift from the installer src to e2e tests.
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: smarterclayton The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
@smarterclayton: Updated the following 2 configmaps:
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
These are from b7cc916 (Set KUBE_SSH_USER for new installer for AWS tests, openshift#2274) and 43dde9e (Set KUBE_SSH_BASTION and KUBE_SSH_KEY_PATH in installer tests, 2018-12-23, openshift#2469). But moving forward, reliable SSH access direct to nodes will be hard, with things like openshift/installer@6add0ab447 (Remove public IPs from masters, 2019-01-10, openshift/installer#1045) making a SSH bastion a requirement for that sort of thing (at least on AWS). Going forward, ideally e2e tests can be ported to use privileged pods within the cluster to check what they need to check. But however that works out, stop carrying local dead code that is not affecting test results. We can always drag it back out of version control later if it turns out we actually want to go down the KUBE_SSH_* route.
This got pulled up into the 'env' block for cluster-launch-installer-e2e.yaml and cluster-launch-installer-src.yaml in 43dde9e (Set KUBE_SSH_BASTION and KUBE_SSH_KEY_PATH in installer tests, 2018-12-23, openshift#2469). That obsoleted the previous export in the src template's test script. I'm also removing a number of existing e2e consumers that set this to the default value, since there's no need to do that.
We will start using the bastion to do tunneling to workers via SSH tests in
4.0. Leave all existing variables in place.
Fix a few places of config drift from the installer src to e2e tests.
Supports openshift/origin#21700 and gets more of our e2e suite passing on AWS.