acceptance

Documentation

Index

• Constants
• type Runner
  • func (r *Runner) Name() string
  • func (r *Runner) Prepare(logger kitlog.Logger, config *rest.Config) error
  • func (r *Runner) Run(logger kitlog.Logger, config *rest.Config)

Constants

const (
	AuthBackendMountPath = "kubernetes"
	AuthBackendRole      = "default"
	SentinelSecretValue  = "eats-the-world"
)

Types

type Runner

type Runner struct{}

func (*Runner) Name

func (r *Runner) Name() string

func (*Runner) Prepare

func (r *Runner) Prepare(logger kitlog.Logger, config *rest.Config) error

Prepare is used for configuring a Vault server in our acceptance tests to provide Kubernetes authentication via service account.

It does several things:

• Mounts a kv2 secrets engine at secret/

• Creates a Kubernetes auth backend mounted at auth/kubernetes

• Configures the Kubernetes backend to authenticate against the currently detected Kubernetes API server (the current cluster, if run from within)

• For all successful Kubernetes logins, the user is assigned a token that maps to a cluster-reader policy, which permits reading of secrets from:

  secret/data/kubernetes/{namespace}/{service-account-name}/*

func (*Runner) Run

func (r *Runner) Run(logger kitlog.Logger, config *rest.Config)