conjurdemos / kubernetes-conjur-demo

Demo application for Conjur Kubernetes integration
11 stars 14 forks source link

Add DeploymentConfigs as app identity in Jenkins OpenShift CI #115

Open diverdane opened 3 years ago

diverdane commented 3 years ago

Is your feature request related to a problem? Please describe.

Currently, the Jenkins Openshift CI does not include the use of DeploymentConfigs OpenShift resource as application identity for authn-k8s. This should be included in the tests.

This change to the kubernetes-conjur-demo CI will depend upon this change in the kubernetes-conjur-deploy scripts: https://github.com/cyberark/kubernetes-conjur-deploy/pull/158

Describe the solution you would like

The authentication policies in policy/templates/project-authn-def.template.yml should include this annotation for OpenShift host definitions used for annotation-based authentication:

        authn-k8s/deployment-config: test-app-summon-sidecar

Describe alternatives you have considered

Additional context

Depends upon: https://github.com/cyberark/kubernetes-conjur-deploy/pull/158