Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Kubernetes native secrets to secret stores #7744

Merged
merged 3 commits into from
Sep 3, 2024

Conversation

superbeeny
Copy link
Contributor

Description

Adding secret store capabilities to reference kubernetes secrets natively

Type of change

Fixes: #5520

@superbeeny superbeeny requested review from a team as code owners July 18, 2024 18:17
@radius-functional-tests
Copy link

radius-functional-tests bot commented Jul 18, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 14071b1
Unique ID func5643007ca6
Image tag pr-func5643007ca6
Click here to see the list of tools in the current test run
  • gotestsum 1.10.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.1.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func5643007ca6
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func5643007ca6
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func5643007ca6
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func5643007ca6
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting datastoresrp functional tests...
⌛ Starting shared functional tests...
⌛ Starting ucp functional tests...
⌛ Starting msgrp functional tests...
⌛ Starting samples functional tests...
⌛ Starting kubernetes functional tests...
⌛ Starting cli functional tests...
❌ Failed to install Radius for shared functional test. Please check the logs for more details
❌ Failed to install Radius for datastoresrp functional test. Please check the logs for more details
❌ shared functional test failed. Please check the logs for more details
❌ Failed to install Radius for samples functional test. Please check the logs for more details
❌ datastoresrp functional test failed. Please check the logs for more details
❌ Failed to install Radius for daprrp functional test. Please check the logs for more details
❌ samples functional test failed. Please check the logs for more details
❌ Failed to install Radius for msgrp functional test. Please check the logs for more details
❌ Failed to install Radius for ucp functional test. Please check the logs for more details
❌ msgrp functional test failed. Please check the logs for more details
❌ msgrp functional test cancelled. Please check the logs for more details
❌ ucp functional test cancelled. Please check the logs for more details
❌ daprrp functional test cancelled. Please check the logs for more details
❌ kubernetes functional test cancelled. Please check the logs for more details
❌ cli functional test cancelled. Please check the logs for more details

Copy link

codecov bot commented Jul 18, 2024

Codecov Report

Attention: Patch coverage is 85.10638% with 14 lines in your changes missing coverage. Please review.

Project coverage is 61.18%. Comparing base (96d5cf8) to head (9ebc7ab).
Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
pkg/corerp/renderers/container/render.go 81.13% 7 Missing and 3 partials ⚠️
...orerp/api/v20231001preview/container_conversion.go 90.24% 2 Missing and 2 partials ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7744      +/-   ##
==========================================
+ Coverage   61.06%   61.18%   +0.11%     
==========================================
  Files         523      523              
  Lines       27497    27588      +91     
==========================================
+ Hits        16792    16879      +87     
- Misses       9218     9222       +4     
  Partials     1487     1487              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@radius-functional-tests
Copy link

radius-functional-tests bot commented Jul 18, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref f1d1aca
Unique ID func39bb0aa53b
Image tag pr-func39bb0aa53b
Click here to see the list of tools in the current test run
  • gotestsum 1.10.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.1.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func39bb0aa53b
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func39bb0aa53b
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func39bb0aa53b
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func39bb0aa53b
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting kubernetes functional tests...
⌛ Starting daprrp functional tests...
⌛ Starting shared functional tests...
⌛ Starting samples functional tests...
⌛ Starting msgrp functional tests...
⌛ Starting cli functional tests...
⌛ Starting ucp functional tests...
⌛ Starting datastoresrp functional tests...
✅ kubernetes functional tests succeeded
✅ samples functional tests succeeded
✅ msgrp functional tests succeeded
❌ daprrp functional test failed. Please check the logs for more details
✅ ucp functional tests succeeded
❌ cli functional test cancelled. Please check the logs for more details
❌ datastoresrp functional test cancelled. Please check the logs for more details

@radius-functional-tests
Copy link

radius-functional-tests bot commented Jul 18, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 5f240b8
Unique ID funcd6ffade561
Image tag pr-funcd6ffade561
Click here to see the list of tools in the current test run
  • gotestsum 1.10.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.1.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcd6ffade561
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcd6ffade561
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funcd6ffade561
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcd6ffade561
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting samples functional tests...
⌛ Starting datastoresrp functional tests...
⌛ Starting msgrp functional tests...
⌛ Starting kubernetes functional tests...
⌛ Starting cli functional tests...
⌛ Starting daprrp functional tests...
✅ samples functional tests succeeded
✅ ucp functional tests succeeded
✅ msgrp functional tests succeeded
✅ kubernetes functional tests succeeded
❌ shared functional test cancelled. Please check the logs for more details
❌ daprrp functional test cancelled. Please check the logs for more details

@radius-functional-tests
Copy link

radius-functional-tests bot commented Jul 18, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 910fdde
Unique ID funca04f33fda5
Image tag pr-funca04f33fda5
Click here to see the list of tools in the current test run
  • gotestsum 1.10.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.1.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funca04f33fda5
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funca04f33fda5
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funca04f33fda5
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funca04f33fda5
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp functional tests...
⌛ Starting cli functional tests...
⌛ Starting msgrp functional tests...
⌛ Starting kubernetes functional tests...
⌛ Starting shared functional tests...
⌛ Starting samples functional tests...
⌛ Starting datastoresrp functional tests...
✅ msgrp functional tests succeeded
✅ ucp functional tests succeeded
✅ samples functional tests succeeded
✅ kubernetes functional tests succeeded
❌ daprrp functional test failed. Please check the logs for more details
❌ cli functional test cancelled. Please check the logs for more details
❌ datastoresrp functional test cancelled. Please check the logs for more details
❌ shared functional test cancelled. Please check the logs for more details

@rynowak
Copy link
Contributor

rynowak commented Jul 19, 2024

Thanks for submitting this @superbeeny ! This is a substantial feature that has been on the backlog for a long time.

I'll start reviewing the code. While we're making progress on that, a few month things we'll need to do.

  • Post and get signoff on a feature design spec at radius-project/design-notes. We require a design doc for API changes. @willtsai is on the hook for this.
  • Post and get signoff on a an engineering design doc at radius-project/design-notes. We require a design doc for API changes.
  • Update existing functional tests and samples to handle the breaking change.
  • Update docs (post-merge) to make sure they are valid.

/cc @Reshrahim as FYI

Copy link
Contributor

@ytimocin ytimocin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is looking great! Added some comments and asked some questions. Thanks a lot!

pkg/corerp/datamodel/container.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Show resolved Hide resolved
typespec/Applications.Core/containers.tsp Outdated Show resolved Hide resolved
pkg/corerp/api/v20231001preview/container_conversion.go Outdated Show resolved Hide resolved
@superbeeny
Copy link
Contributor Author

DCO not my fault ;)

@superbeeny
Copy link
Contributor Author

Functional Test - https://github.com/radius-project/radius/actions/runs/9997221043/job/27633433901#step:27:216

failed with a 403 error which I don't think is related to this PR

@radius-functional-tests
Copy link

radius-functional-tests bot commented Aug 15, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref d8b2413
Unique ID func6437ea859d
Image tag pr-func6437ea859d
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func6437ea859d
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func6437ea859d
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func6437ea859d
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func6437ea859d
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
❌ Test recipe publishing failed

@radius-functional-tests
Copy link

radius-functional-tests bot commented Aug 15, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 9e83cdb
Unique ID funcc37fb0ed28
Image tag pr-funcc37fb0ed28
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcc37fb0ed28
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcc37fb0ed28
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funcc37fb0ed28
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcc37fb0ed28
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
❌ Test recipe publishing failed

@radius-functional-tests
Copy link

radius-functional-tests bot commented Aug 21, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 53f6469
Unique ID funca22c57cf8b
Image tag pr-funca22c57cf8b
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funca22c57cf8b
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funca22c57cf8b
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funca22c57cf8b
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funca22c57cf8b
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting datastoresrp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ corerp-cloud functional tests succeeded
✅ datastoresrp-cloud functional tests succeeded
✅ ucp-cloud functional tests succeeded

pkg/corerp/api/v20231001preview/container_conversion.go Outdated Show resolved Hide resolved
pkg/corerp/api/v20231001preview/container_conversion.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Outdated Show resolved Hide resolved
pkg/corerp/renderers/container/render.go Outdated Show resolved Hide resolved
@radius-functional-tests
Copy link

radius-functional-tests bot commented Aug 22, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 68c8308
Unique ID funca2ace6278d
Image tag pr-funca2ace6278d
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funca2ace6278d
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funca2ace6278d
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funca2ace6278d
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funca2ace6278d
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting datastoresrp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ datastoresrp-cloud functional tests succeeded
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

@radius-functional-tests
Copy link

radius-functional-tests bot commented Aug 22, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 0919594
Unique ID funcd288ae6224
Image tag pr-funcd288ae6224
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcd288ae6224
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcd288ae6224
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funcd288ae6224
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcd288ae6224
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting datastoresrp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ datastoresrp-cloud functional tests succeeded
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

rynowak pushed a commit to radius-project/design-notes that referenced this pull request Aug 27, 2024
Initial PR for design doc in support of
radius-project/radius#7744 addressing
radius-project/radius#5520

---------

Signed-off-by: Nick Beenham <1985327+superbeeny@users.noreply.github.com>
@superbeeny superbeeny closed this Sep 1, 2024
@superbeeny
Copy link
Contributor Author

not sure how that happened

@radius-functional-tests
Copy link

radius-functional-tests bot commented Sep 3, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref cb7775b
Unique ID func15b1de24be
Image tag pr-func15b1de24be
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func15b1de24be
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func15b1de24be
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func15b1de24be
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func15b1de24be
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting datastoresrp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ datastoresrp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

Signed-off-by: Nick Beenham <1985327+superbeeny@users.noreply.github.com>
Signed-off-by: Nick Beenham <1985327+superbeeny@users.noreply.github.com>
@radius-functional-tests
Copy link

radius-functional-tests bot commented Sep 3, 2024

Radius functional test overview

🔍 Go to test action run

Name Value
Repository superbeeny/radius
Commit ref 9ebc7ab
Unique ID func39e72d10a7
Image tag pr-func39e72d10a7
Click here to see the list of tools in the current test run
  • gotestsum 1.12.0
  • KinD: v0.20.0
  • Dapr: 1.12.0
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func39e72d10a7
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func39e72d10a7
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-func39e72d10a7
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func39e72d10a7
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting datastoresrp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ datastoresrp-cloud functional tests succeeded
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

@rynowak rynowak merged commit 3ddb61e into radius-project:main Sep 3, 2024
29 checks passed
Copy link
Contributor

@kachawla kachawla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for addressing the comments!

Reshrahim pushed a commit to Reshrahim/design-notes that referenced this pull request Sep 20, 2024
Initial PR for design doc in support of
radius-project/radius#7744 addressing
radius-project/radius#5520

---------

Signed-off-by: Nick Beenham <1985327+superbeeny@users.noreply.github.com>
Signed-off-by: Reshma Abdul Rahim <reshmarahim.abdul@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Design: extend the use-cases of Applications.Core/secretStores
5 participants