Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding v1 version for gmsacredentialspec CRDs #44

Merged
merged 3 commits into from
Oct 1, 2021

Conversation

marosset
Copy link
Contributor

Signed-off-by: Mark Rossetti [email protected]

Fixes #43

I ran our 'GMSA Full' test on a local cluster and got passing results.
I even saw the deprecation message saying to use the v1 api

Aug 12 13:40:47.914: INFO: stdout: "apiVersion: windows.k8s.io/v1alpha1\r\nkind: GMSACredentialSpec\r\nmetadata:\r\n  name: gmsa-e2e\r\ncredspec:\r\n  CmsPlugins:\r\n  - ActiveDirectory\r\n  DomainJoinConfig:\r\n    Sid: S-1-5-21-1709982657-1049071122-2546699011\r\n    MachineAccountName: gmsa-e2e\r\n    Guid: d6473599-ce06-46e0-9fa4-ee965441c629\r\n    DnsTreeName: k8sgmsa.lan\r\n    DnsName: k8sgmsa.lan\r\n    NetBiosName: k8sgmsa\r\n  ActiveDirectoryConfig:\r\n    GroupManagedServiceAccounts:\r\n    - Name: gmsa-e2e\r\n      Scope: k8sgmsa.lan\r\n    - Name: gmsa-e2e\r\n      Scope: k8sgmsa\r\n\r\n"

<snip>

Aug 12 13:40:57.120: INFO: stderr: "Warning: windows.k8s.io/v1alpha1 GMSACredentialSpec is deprecated; use windows.k8s.io/v1 GMSACredentialSpec\n"

<snip>

"msg":"PASSED [sig-windows] [Feature:Windows] GMSA Full [Serial] [Slow] GMSA support works end to end","total":1,"completed":1,"skipped":5604,"failed":0}
SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Aug 12, 2021
@k8s-ci-robot k8s-ci-robot requested review from ddebroy and wk8 August 12, 2021 21:42
@k8s-ci-robot k8s-ci-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Aug 12, 2021
Copy link
Contributor

@jsturtevant jsturtevant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you think we can add an integration test to the suite that shows we can grab both versions or something along those lines?

admission-webhook/deploy/gmsa-crd.yml Outdated Show resolved Hide resolved
@marosset
Copy link
Contributor Author

Do you think we can add an integration test to the suite that shows we can grab both versions or something along those lines?

Yea, let me look into that.

@marosset
Copy link
Contributor Author

/retest

@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Sep 14, 2021
@marosset
Copy link
Contributor Author

@jsturtevant I finally had a chance to add some integration tests that verify you can query either v1alpha1 or v1 CRD versions.

Copy link
Contributor

@jsturtevant jsturtevant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for adding tests, one comment about the test specs

@marosset marosset force-pushed the gmsa-crd-v1 branch 2 times, most recently from d0fee41 to d903a63 Compare September 22, 2021 21:48
@jsturtevant
Copy link
Contributor

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Oct 1, 2021
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jsturtevant, marosset

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:
  • OWNERS [jsturtevant,marosset]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jsturtevant
Copy link
Contributor

/sig windows

@k8s-ci-robot k8s-ci-robot added the sig/windows Categorizes an issue or PR as relevant to SIG Windows. label Oct 1, 2021
@k8s-ci-robot k8s-ci-robot merged commit 93d18ad into kubernetes-sigs:master Oct 1, 2021
@marosset marosset deleted the gmsa-crd-v1 branch October 1, 2021 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. sig/windows Categorizes an issue or PR as relevant to SIG Windows. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Moving the GMSA CRD api's to Beta
3 participants