Commit graph

5 commits

Author SHA1 Message Date
Patrick Ohly
4e38454959 test/integration: add missing sig labels
Each directory with tests should have a sig label in its OWNERS file to
document which SIG is responsible for the test. Otherwise SIG Testing gets
pinged by SIG Release as the default owner of all tests when a test fails.

Some integration test packages are either empty (objectmeta) or useless with
unclear owner (configmap); those get removed.
2026-04-10 14:01:51 +02:00
Jordan Liggitt
84be835316
Deflake TestPodSubresourceAuth by waiting for effective permissions before testing 2026-03-31 10:27:08 -04:00
Anish Shah
7e3ae1060f integration: RBAC tests for /resize request
The test confirms that the subject can successfully
resize the Pod resources but not the entire pod.
2024-11-06 01:33:14 +00:00
Joe Betz
4d30c43494 Add integration tests for secondary authz 2023-03-06 12:08:53 -05:00
Margo Crawford
74f5ed6b17 This introduces an Impersonate-Uid header to server side code.
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.

This PR contains:

* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
  and ensures that the API server populates the correct impersonated spec.uid upon creation.
2021-07-06 10:13:16 -07:00