search

conjurdemos / conjur-intro

Miscellaneous utilities that make it easier to make, manage, and run demos
Apache License 2.0
10 stars 11 forks source link

Proposed changes to CLI to support manual testing #71

Closed jvanderhoof closed 4 years ago

jvanderhoof commented 4 years ago

This is a proposed interface change to allow this project to support common customer workflows. The goal of this interface is to simplify manual testing of a wide variety of customer scenarios to ensure product integrity.

Upgrades for a single master and an auto-failover cluster have been validated as follows:

Single master upgrade

bin/dap --provision-master --version 11.5.0
bin/api --load-policy-and-values
bin/dap --upgrade-master 5.11.0

Auto-failover cluster (w/ follower) upgrade

bin/dap --provision-master --version 11.5.0
bin/api --load-policy-and-values
bin/dap --provision-standbys --version 11.5.0
bin/dap --enable-auto-failover
bin/dap --provision-follower --version 11.5.0
bin/api --authenticate-user

bin/dap --upgrade-master 5.11.0
bin/dap --provision-standbys --version 5.11.0
bin/dap --enable-auto-failover
bin/dap --provision-follower --version 5.11.0
bin/api --authenticate-user
h-artzi commented 4 years ago

fetch secrets is good, but a simple add on might be a set secrets as well. To ensure they don't return empty strings.

jvanderhoof commented 4 years ago

@h-artzi, this tool is intended to simplify common workflows (for engineers). I don't want to replace the Conjur CLI. Is there anything else this needs, or can we merge these improvements?