Dimitris Karakasilis
ffd5f18bcf
Fix error interface conversion: interface {} is []uint8, not string
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-17 15:20:18 +02:00
Dimitris Karakasilis
3b89def5b4
Make sure we run command in bash to avoid error in Ubuntu
...
```
set: Illegal option -o pipefail
```
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-17 12:38:22 +02:00
Dimitris Karakasilis
1e3efb57cc
Split scenarios in different GA jobs
...
to parallelise better and allow re-running just the failed tests
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-15 09:58:16 +02:00
Dimitris Karakasilis
0c236b6145
Let OnFailure handle abnormal VM termination
...
now that peg gracefully terminates the VM when `Destroy` is called.
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-14 16:15:11 +02:00
Dimitris Karakasilis
266c4f20e9
Handle unexpected VM exit better and use a core image with working DNS
...
Also print serial output when something goes wrong
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-14 10:09:46 +02:00
Dimitris Karakasilis
08bb62f94e
Remove TODO
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 12:03:24 +02:00
Dimitris Karakasilis
0d3406fa7b
Fallback to system CAs
...
No automated test for this case because it's complicated to get a
properly signed certificate in tests:
- the domain we use is sslip.io (not sure if letsencrypt would sign it)
- we need to use the letsencrypt production and that has quotas not
suitable for CI
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
1cd4d9a7af
Implement test that checks invalid cert case
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
d875e54171
Implement pinned certs
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
2967fb0a6c
[WIP] Implement failing test for pinned cert
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
e9433d2ba7
Move challenger server inside the cluster and serve with TLS
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
7dc1e39ac7
Implement an e2e test suite for kcrypt encryption
...
Scenarios based on docs: https://kairos.io/docs/advanced/partition_encryption/
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-02-02 11:48:44 +02:00