Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

{AKS} [KMS] Update tests to use vnet integration #8021

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

lzhecheng
Copy link

private keyvault + konnectivity is blocked now, so vnet integration should be used.


This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

az aks create/update --enable-azure-keyvault-kms

General Guidelines

  • Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
  • Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
  • My extension version conforms to the Extension version schema

For new extensions:

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

Copy link

azure-client-tools-bot-prd bot commented Sep 24, 2024

️✔️Azure CLI Extensions Breaking Change Test
️✔️Non Breaking Changes

Copy link

Hi @lzhecheng,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in setup.py as well.

@yonzhan
Copy link
Collaborator

yonzhan commented Sep 24, 2024

KMS

Copy link

Copy link
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Queued live test to validate the change

  • test_aks_create_with_azurekeyvaultkms_private_key_vault
  • test_aks_update_with_azurekeyvaultkms_private_key_vault
  • test_aks_create_with_azurekeyvaultkms_private_cluster_v1_private_key_vault

Copy link
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please use {AKS} as the beginning of the PR title

"--assign-identity {identity_id} "
"--enable-azure-keyvault-kms --azure-keyvault-kms-key-id={key_id} "
"--azure-keyvault-kms-key-vault-network-access=Private --azure-keyvault-kms-key-vault-resource-id {kv_resource_id} "
"--enableVnetIntegration=true "
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The option name should be --enable-apiserver-vnet-integration

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch!

@lzhecheng lzhecheng changed the title [KMS] Update tests {AKS} [KMS] Update tests Sep 25, 2024
@FumingZhang
Copy link
Member

/azp run

Copy link

Azure Pipelines successfully started running 2 pipeline(s).

private keyvault + konnectivity is blocked now, so vnet integration
should be used.

Signed-off-by: Zhecheng Li <[email protected]>
@lzhecheng lzhecheng changed the title {AKS} [KMS] Update tests {AKS} [KMS] Update tests to use vnet integration Sep 26, 2024
@FumingZhang
Copy link
Member

Queued live test to validate the change

  • test_aks_create_with_azurekeyvaultkms_private_key_vault
  • test_aks_update_with_azurekeyvaultkms_private_key_vault
  • test_aks_create_with_azurekeyvaultkms_private_cluster_v1_private_key_vault

Requeued, test passed!

Copy link
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lzhecheng
Copy link
Author

@zhoxing-ms @yanzhudd Could you please merge this one? Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
AKS Auto-Assign Auto assign by bot
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants