Skip to content

Commit

Permalink
Update CA integration test to use localho.st DNS domain
Browse files Browse the repository at this point in the history
Signed-off-by: Josh Kneubuhl <jkneubuh@us.ibm.com>
  • Loading branch information
jkneubuh authored and asararatnakar committed Jan 2, 2023
1 parent e1976de commit 75d34ad
Show file tree
Hide file tree
Showing 4 changed files with 14 additions and 12 deletions.
8 changes: 5 additions & 3 deletions docs/DEVELOPING.md
Original file line number Diff line number Diff line change
Expand Up @@ -106,7 +106,7 @@ If for some reason you can't seem to mangle an image into KIND, build, tag, and
the `localhost:5000` container registry. (Or use Rancher/k3s.)


## What's up with Ingress, vcap.me, and nip.io domains?
## What's up with Ingress, localho.st, vcap.me, and nip.io domains?

Fabric Operator uses Kube Ingress to route traffic through a common, DNS wildcard domain (e.g. *.my-network.example.com.)
In cloud-native environments, where a DNS wildcard domain resolvers are readily available, it is possible to
Expand All @@ -115,11 +115,13 @@ map a top-level A record to a single IP address bound to the cluster ingress.
Unfortunately it is _exceedingly annoying_ to emulate a top-level A wildcard DNS domain in a way that can be visible
to pods running in a Docker network (e.g. KIND) AND to the host OS using the same domain alias and IP.

Two solutions available are:
Alternate solutions available:

- Use the `*.localho.st` domain alias for your Fabric network, mapping all sub-domains and hosts to 127.0.0.1.

- Use the `*.vcap.me` domain alias for your Fabric network, mapping to 127.0.0.1 in all cases. This is convenient for
scenarios where pods in the cluster will have no need to traverse the ingress (e.g. in integration testing).

(Update: vcap.me stopped resolving host names some time in late 2022.)

- Use the [Dead simple wildcard DNS for any IP Address](https://nip.io) *.nip.io domain for the cluster, providing
full flexibility for the IP address of the ingress port.
Expand Down
14 changes: 7 additions & 7 deletions integration/ca/ca_suite_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -42,17 +42,17 @@ func TestCa(t *testing.T) {
}

const (
// This TLS certificate is encoded for the DNS domain aliases 127.0.0.1, localhost, and *.vcap.me and is good for 5 years:
// This TLS certificate is encoded for the DNS domain aliases 127.0.0.1, localhost, and *.localho.st and is good for 5 years:
//
// notAfter: "2027-05-24T03:14:42Z"
// notBefore: "2022-05-25T03:14:42Z"
// renewalTime: "2025-09-22T19:14:42Z"
// Validity
// Not Before: Jan 2 12:37:24 2023 GMT
// Not After : Jan 1 12:37:24 2028 GMT
//
// This certificate was generated with cert-manager.io using a self-signed issuer for the root CA.
// If tests start to fail for TLS handshake errors, the certificate will need to be renewed or reissued.
tlsCert = "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"
tlsKey = "LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUhoWWFRbDViYXZVR3FJd2prK3YrODNmYzNIamZuRVdueEFQbjJ5OFRTUWRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFNmQ3OExTM1dLMHRVdVVFVVdveGRrTWFoMm9udFNlc1BSdDNhUVNDbXBkRFBWNGlwaGcvTQpUNkJTWGFRakh1bGJkczRya2VwRW1qUDhsZ1h2QzRNc1N3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo="
trustedRootTLSCert = "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"
tlsCert = "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"
tlsKey = "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"
trustedRootTLSCert = "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"
)

var (
Expand Down
2 changes: 1 addition & 1 deletion integration/integration.go
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ import (
)

const (
TestAutomation1IngressDomain = "vcap.me"
TestAutomation1IngressDomain = "localho.st"
)

var (
Expand Down
2 changes: 1 addition & 1 deletion integration/migration/fabric/fabric_suite_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ const (
defaultConsoleDef = "../../../definitions/console"
FabricBinaryVersion = "2.2.3"
FabricCABinaryVersion = "1.5.1"
domain = "vcap.me"
domain = "localho.st"
)

var (
Expand Down

0 comments on commit 75d34ad

Please sign in to comment.