Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add confidential nodes example #2227

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

arthurlapertosa
Copy link

No description provided.

@arthurlapertosa arthurlapertosa marked this pull request as ready for review December 31, 2024 21:06
@arthurlapertosa arthurlapertosa requested review from apeabody, ericyz and a team as code owners December 31, 2024 21:06
@arthurlapertosa
Copy link
Author

cc @erlanderlo

Copy link
Collaborator

@apeabody apeabody left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution @arthurlapertosa!

A few initial notes to get the tests ready.

"github.com/terraform-google-modules/terraform-google-kubernetes-engine/test/integration/testutils"
)

func TestConfidentialSaferCluster(t *testing.T) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add new apply, validate, teardown for TestConfidentialSaferCluster in https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/build/int.cloudbuild.yaml#L37

You don't need to worry about init as that is automatically done for all examples.

"nodePools.management.autoRepair",
"nodePools.shieldedInstanceConfig",
}
for _, pth := range validateJSONPaths {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You could consider using the new testutils.TGKEAssertGolden(), example: https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/test/integration/node_pool/node_pool_test.go#L63

Just include all the paths/values you want to test in TestConfidentialSaferCluster.json


bpt.DefineVerify(func(assert *assert.Assertions) {
// Skipping Default Verify as the Verify Stage fails due to change in Client Cert Token
// bpt.DefaultVerify(assert)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please include testutils.TGKEVerify() as it only verifies the resources, not the outputs

Suggested change
// bpt.DefaultVerify(assert)
// bpt.DefaultVerify(assert)
testutils.TGKEVerify(t, bpt, assert) // Verify Resources

*/

terraform {
required_version = ">= 0.13"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: we are moving to min TF v1.3

Suggested change
required_version = ">= 0.13"
required_version = ">= 1.3"

@apeabody apeabody self-assigned this Jan 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants