-
Notifications
You must be signed in to change notification settings - Fork 94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: implement proxy using msal-go #142
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mostly LGTM
@@ -248,14 +252,18 @@ $(E2E_TEST): | |||
# Ginkgo configurations | |||
GINKGO_FOCUS ?= | |||
GINKGO_SKIP ?= | |||
GINKGO_NODES ?= 3 | |||
GINKGO_NODES ?= 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is it not possible to run e2e tests in parallel?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The proxy test and token exchange test currently use the same service account for tests and running in parallel will cause a race. I can add trust for a new service account and enable parallel again in a follow-up PR.
klog.InfoS("received token request", "method", r.Method, "uri", r.RequestURI) | ||
w.Header().Set("Server", version.GetUserAgent("proxy")) | ||
clientID, resource := parseTokenRequest(r) | ||
// TODO (aramase) should we fallback to the clientID in the annotated service account |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we implement this in this PR or a follow-up PR?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is still up for debate so I didn't want to add this as part of this PR. I'll add a follow-up PR once we make a decision on this.
Signed-off-by: Anish Ramasekar <[email protected]> update token acquire logic Signed-off-by: Anish Ramasekar <[email protected]> test: add e2e tests for proxy Signed-off-by: Anish Ramasekar <[email protected]>
Signed-off-by: Anish Ramasekar [email protected]
Reason for Change:
proxy-init
andproxy
Requirements
Issue Fixed:
fixes #57
fixes #14
Please answer the following questions with yes/no:
Does this change contain code from or inspired by another project? If so, did you notify the maintainers and provide attribution?
Notes for Reviewers: