redpanda
redpanda copied to clipboard
redpanda-data
tests/ACLs: add cluster wide mtls migration test
Cover letter
PRs such as #4501 and #5292 extended Redpanda security to use mtls with principal mapping rules. These features are enabled with new confgs, endpoint_authn_method and kafka_enable_authorization, in the YAML file. This PR adds a test that checks for successful authn and authz when a user migrates all brokers from a state with the new configs disabled to a state with them enabled.
Closes #5740
Changes from force-push 224eefe:
- Removed duplicate code
- Cleaned up comments
Changes from force-push 224eefe:
- Removed duplicate code
- Cleaned up comments
Changes from force-push d36a0d4:
- Undo changes to security settings reset
UX changes
- none
Release notes
- Adds a test to check cluster wide migration to mtls authorization with principal mapping rules
The linter on my local fixed something that the linter on CI doesn't like. The test code is ready for review though. I'll push the linter fix after CI is finished because I need to see what happens with that anyways.
LGTM
Not sure what you have to do about the failures.
@BenPope Failures were due to changes in this PR. I just pushed the fixes.
It might be worth syncing this with the tip of dev to avoid some CI failures. If you do that, please don't make other changes at the same time.
Fair point, I just rebased and pushed.
Failed to run cherry-pick command. I executed the below command:
git cherry-pick -x 66413e5b30db27257faacf5f32993070907f7186 a34157dbbccb9747c718f02909425c5c1d8b13fd 1e61f6204f8475d1c09eaaa7a2dda52db42147b9 973962ef069023fef17215812086ce702ad47567
