test-infra icon indicating copy to clipboard operation
test-infra copied to clipboard

Add periodic job for signed kubelet serving certs

Open g-gaston opened this issue 5 months ago • 3 comments

This runs all the e2e tests for on-by-default features against a cluster with kubelet server certificates signed by the CP (as opposed to the default self-signed). This way we make sure we exercise certificate validation on any test making exec/logs/port-forward requests.

I tested this locally (with pj on kind) and I got all tests passing except a few ones using volumes. I suspect this is because I'm running "prow" inside a kind cluster and not because of the job's code. I got the same failures when running ci-kubernetes-e2e-kind locally.

g-gaston avatar Aug 01 '25 20:08 g-gaston

/triage accepted /assign

aramase avatar Aug 04 '25 16:08 aramase

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: g-gaston Once this PR has been reviewed and has the lgtm label, please assign enj for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot avatar Sep 15 '25 17:09 k8s-ci-robot

@enj could you take a look? Thanks!

g-gaston avatar Oct 23 '25 15:10 g-gaston