Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update OIDC test fixture #89526

Merged
merged 5 commits into from Aug 23, 2022
Merged

Update OIDC test fixture #89526

merged 5 commits into from Aug 23, 2022

Conversation

jakelandis
Copy link
Contributor

@jakelandis jakelandis commented Aug 23, 2022

This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com. As part of this change some of the docker image demo
login has changed from prior versions and the test code is updated accordingly.

fixes #89477
reverts #89478 / e949dff.


To figure out the required changes I setup a local proxy to watch traffic and manually executed some of the workflows and adjusted the test setup accordingly.
When run as a suite of tests depending on order some tests would fail... I found that setting op.authz.alwaysPromptForConsent=true and op.authz.alwaysPromptForAuth=true allows for the tests to pass consistently.

Buildscan with only these tests: https://gradle-enterprise.elastic.co/s/xnysxq5b2m6za

@jakelandis jakelandis added >test Issues or PRs that are addressing/adding tests :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) v8.5.0 labels Aug 23, 2022
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Aug 23, 2022
Copy link
Member

@jkakavas jkakavas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jakelandis jakelandis added :Security/IdentityProvider Identity Provider (SSO) project in X-Pack v7.17.6 v8.3.4 v8.4.1 auto-merge Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) auto-backport-and-merge Automatically create backport pull requests and merge when ready and removed :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) labels Aug 23, 2022
@jakelandis jakelandis merged commit b557d20 into elastic:main Aug 23, 2022
@jakelandis jakelandis deleted the c2id_fix branch August 23, 2022 14:29
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes elastic#89477
reverts elastic#89478 / e949dff.
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes elastic#89477
reverts elastic#89478 / e949dff.
@elasticsearchmachine
Copy link
Collaborator

💔 Backport failed

Status Branch Result
7.17 Commit could not be cherrypicked due to conflicts
8.3
8.4

You can use sqren/backport to manually backport by running backport --upstream elastic/elasticsearch --pr 89526

elasticsearchmachine pushed a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
elasticsearchmachine pushed a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
@mark-vieira
Copy link
Contributor

Thanks, Jake! It's worth noting that this issue still exists since we still aren't using a docker image that provides an aarch64 build.

jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo
login has changed from prior versions and the test code is updated accordingly.

fixes elastic#89477
reverts elastic#89478 / e949dff.
jakelandis added a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
jakelandis added a commit that referenced this pull request Nov 2, 2022
This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: #89526
part of: #71378
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Nov 3, 2022
This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: elastic#89526
part of: elastic#71378
elasticsearchmachine pushed a commit that referenced this pull request Nov 3, 2022
…1292)

This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: #89526
part of: #71378
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport-and-merge Automatically create backport pull requests and merge when ready auto-merge Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) :Security/IdentityProvider Identity Provider (SSO) project in X-Pack Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v7.17.6 v8.3.4 v8.4.1 v8.5.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OpenID Connect integration tests failing due to missing fixture Docker image
4 participants