search

SovereignCloudStack / standards

SCS standards in a machine readable format
https://scs.community/
Creative Commons Attribution Share Alike 4.0 International
30 stars 21 forks source link

[Feature Request] KaaS conformance tests with other providers/implementations #649

Open martinmo opened 2 days ago

martinmo commented 2 days ago

At the moment, conformance tests run as part of our Zuul E2E tests and only for the reference implementation. Other implementations and clouds should be included, e.g., Gardener on REGIO.cloud.

CC @tonifinger

mbuechse commented 2 days ago

@mxmxchere Can you provide us with a cluster or two? Ideally, one for each active k8s branch, but if we could use some kind of self-service (API) to create and tear down clusters ad-hoc for our conformance tests, that would be even better.

mxmxchere commented 2 days ago

Sounds like a perfect use case for the moin-cluster. The cluster comes pre-deployed with a few (currently one, planned are more) clusterstacks. You can login via oidc. Some namespaces are pre-equipped with credentials for gx-scs. You can find infos here. To access the predeployed namespaces you have to be member of the team moin-cluster-all-playgrounds. Btw @jschoone will host a little intro presentation on how to use the cluster in tomorrows community-call. A bulk-PR to add people to the all-playgrounds-team is also planned.

martinmo commented 2 days ago

@mxmxchere I am already part of the moin-cluster-playground1 team, but with the kubeconfig described in the usage I can't list the pods:

$ kubectl get pods
Error from server (Forbidden): pods is forbidden: User "oidc:martinmo" cannot list resource "pods" in API group "" in the namespace "default"

I also tried namespaces playground1 and kaas-playground1 with the same result. OIDC login via GitHub worked as expected, however.

martinmo commented 1 day ago

Infos from today's Container Call:

Currently, there is some restructuring going on in the Moin cluster and the moin-cluster-playground1 team has no access anymore. Instead, it is planned to create the team as outlined above. This will be announced in a lightning talk today.

For getting access to Gardener based clusters we can use Plusserver PSKE or regiocloud. Credentials can be obtained from @joshmue and @mxmxchere, respectively.