Client plugin test fixes.

.travis.yml

@@ -24,4 +24,4 @@ before_script:
 
 script:
  - CGO_ENABLED=0 go build -o bin/kubernetes-credential-provider-vault ./cmd/kubernetes-credential-provider-vault
- - KUBE_ADDR=https://$(minikube ip):8443 go test -v ./...
+ - KUBE_ADDR=https://$(minikube ip):8443 go test -v -run TestIntegration_Kubernetes/ClientPlugin ./pkg/integration

pkg/integration/integration_test.go

@@ -33,6 +33,7 @@ import (
 	"path/filepath"
 	"testing"
 	"time"
+	"github.com/davecgh/go-spew/spew"
 )
 
 const (
@@ -466,6 +467,7 @@ func testKubernetesClientPlugin(t *testing.T, vaultClient *api.Client) {
 
 	kubeConfig, err := clientcmd.NewDefaultClientConfigLoadingRules().Load()
 	require.NoError(t, err)
+	spew.Dump(kubeConfig)
 	if kubeContext := os.Getenv(kubeContextEnv); kubeContext != "" {
 		kubeConfig.CurrentContext = kubeContext
 	}
@@ -497,6 +499,10 @@ func testKubernetesClientPlugin(t *testing.T, vaultClient *api.Client) {
 
 	restClientConfig, err := clientcmd.NewDefaultClientConfig(*kubeConfig, configOverrides).ClientConfig()
 	require.NoError(t, err)
+	// Make sure TLS client keys don't sneak in to authentication flow.
+	restClientConfig.TLSClientConfig.CertFile = ""
+	restClientConfig.TLSClientConfig.KeyFile = ""
+	spew.Dump(restClientConfig)
 	kubeClient, err := kubernetes.NewForConfig(restClientConfig)
 	require.NoError(t, err)