search

conjurdemos / kubernetes-conjur-demo

Demo application for Conjur Kubernetes integration
11 stars 14 forks source link

Test authn-k8s on Conjur-OSS deployed via Helm chart on OpenShift #131

Closed doodlesbykumbi closed 3 years ago

doodlesbykumbi commented 3 years ago

What does this PR do ?

  1. Adds a logical branch for deploying Conjur OSS via Helm on OpenShift, instead of using kubernetes-conjur-deploy. TODO: it's probably better to move this functionality to kubernetes-conjur-deploy. TODO: there really needs to be a better way of passing along conjur config to kubernetes-conjur-demo (fortunately we're working on this). At present kubernetes-conjur-demo seems too tightly coupled with kubernetes-conjur-deploy and knows too much about it, this makes it more difficult to make updates to either.
  2. Adds flows to Jenkinsfile for test authn-k8s on Conjur-OSS deployed via Helm chart on OpenShift (using both host-ID-based and annotation-based identity.)

Resolves #110

izgeri commented 3 years ago

@doodlesbykumbi I've been talking with @BradleyBoutcher about adding quick start flows (draft content here) to conjurdemos/dap-intro - this way we'd have a single repo to clone to get a basic Conjur OSS or Enterprise up and running on Jenkins. Maybe what you're highlighting here is also an argument for adding a similar super simple flow for Conjur OSS on Kubernetes to dap-intro that we can also use on tests?

The end goal of centralizing all of this content is that we can start to provide super simple patterns for running different Conjur editions in test automation, so that new projects have an easy way to get started writing integration tests.

ETA: not for this PR, obviously - just wanted to raise this as a future-thinking option.

rpothier commented 3 years ago

LGTM