-
Notifications
You must be signed in to change notification settings - Fork 94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test/e2e: docker: Fix KBS test that doesn't compile #2000
test/e2e: docker: Fix KBS test that doesn't compile #2000
Conversation
This is failing the tests for me at the moment:
The KBS log shows that no get requests were made during this testing:
there is an error in the set secret though: I'll try debugging this further, unless @liudalibj you've already looked into this/can spot that |
b0cbe27
to
223bc8e
Compare
Ok, I've tried the libvirt tests locally to see what the difference is and they fail in the same way. @liudalibj - did you have them working in #1935? is there some catch I'm doing wrong? Update I decided to be sensible and check the nightly libvrt tests and they are working, so the failure is probably either user error, or related to us not using the latest CAA by default? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I confirm it fix the compilation issue. Thanks @stevenhorsman !
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@stevenhorsman I didn't look into this issue yet. thanks the fix!
LGTM
@@ -101,10 +101,11 @@ func TestDockerKbsKeyRelease(t *testing.T) { | |||
if !isTestWithKbs() { | |||
t.Skip("Skipping kbs related test as kbs is not deployed") | |||
} | |||
_ = keyBrokerService.EnableKbsCustomizedPolicy("deny_all.rego") | |||
keyBrokerService.SetSampleSecretKey() |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
didn't have the return _
val, maybe won't pass lint check.
As part of the work in confidential-containers#1935, EnableKbsCustomizedPolicy was replaced with EnableKbsCustomizedResourcePolicy and EnableKbsCustomizedAttestationPolicy, but the docker tests wasn't updated, so it doesn't compile, so fix this Signed-off-by: stevenhorsman <[email protected]>
223bc8e
to
448ee25
Compare
I think we should merge this as it unblocks multiple other PRs, but I'm not super happy that I couldn't get this working properly locally, so we might have to fix something here as part of the docker e2e tests |
As part of the work in #1935, EnableKbsCustomizedPolicy was replaced with EnableKbsCustomizedResourcePolicy and EnableKbsCustomizedAttestationPolicy, but the docker tests wasn't updated, so it doesn't compile, so fix this