[infra-tests] Add self-signed integration test

This PR adds a new test option called `self-signed` which is used to enable `self-signed` integration tests. This is done by adding a new `generate-self-signed` make option, which is called whenever `self_signed` env variable is enabled. Once enabled, self-signed certs are genereated and relevant `self-signed-config` is called to attach those files into `kots` config. Signed-off-by: Tarun Pothulapati <[email protected]>
gitpod-io · Sep 20, 2022 · 207426e · 207426e
1 parent 124a2e6
commit 207426e
Show file tree

Hide file tree

Showing 7 changed files with 161 additions and 65 deletions.
diff --git a/.werft/aks-installer-tests.yaml b/.werft/aks-installer-tests.yaml
@@ -20,6 +20,10 @@ args:
   desc: "Set this to true to skip integration tests"
   required: false
   default: false
+- name: selfSigned
+  desc: "Set this to true to generate and use a private self-signed certificate"
+  required: false
+  default: false
 - name: upgrade
   desc: "Set this to true to run KOTS upgrade from the specified version to the latest version"
   required: false

diff --git a/.werft/eks-installer-tests.yaml b/.werft/eks-installer-tests.yaml
@@ -24,6 +24,10 @@ args:
   desc: "Set this to true to run KOTS upgrade from the specified version to the latest version"
   required: false
   default: false
+- name: selfSigned
+  desc: "Set this to true to generate and use a private self-signed certificate"
+  required: false
+  default: false
 - name: preview
   desc: "Setting preview to true creates a self-hosted preview for you to consume"
   required: false
@@ -120,6 +124,10 @@ pod:
           sudo chown -R gitpod:gitpod /workspace
           sudo apt update && apt install gettext-base
 
+          # install mkcert
+          curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
+          chmod +x mkcert-v*-linux-amd64
+          sudo cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
 
           export domain="{{ .Annotations.subdomain }}"
 

diff --git a/.werft/gke-installer-tests.yaml b/.werft/gke-installer-tests.yaml
@@ -20,6 +20,10 @@ args:
   desc: "Set this to true to skip integration tests"
   required: false
   default: false
+- name: selfSigned
+  desc: "Set this to true to generate and use a private self-signed certificate"
+  required: false
+  default: false
 - name: upgrade
   desc: "Set this to true to run KOTS upgrade from the specified version to the latest version"
   required: false
@@ -107,6 +111,11 @@ pod:
           sudo chown -R gitpod:gitpod /workspace
           sudo apt update && apt install gettext-base
 
+          # install mkcert
+          curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
+          chmod +x mkcert-v*-linux-amd64
+          sudo cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
+
           export domain="{{ .Annotations.subdomain }}"
           if [[ "$domain" == "<no value>" ]]; then
             export TF_VAR_TEST_ID=$(echo $RANDOM | md5sum | head -c 5; echo)-gcp