Use TLS for websocket and gRPC tests#11322
Conversation
|
/test pull-knative-serving-https |
Codecov Report
@@ Coverage Diff @@
## main #11322 +/- ##
==========================================
+ Coverage 87.66% 87.69% +0.02%
==========================================
Files 191 191
Lines 9224 9246 +22
==========================================
+ Hits 8086 8108 +22
+ Misses 882 881 -1
- Partials 256 257 +1
Continue to review full report at Codecov.
|
|
/test pull-knative-serving-https |
|
/test pull-knative-serving-https |
|
/test pull-knative-serving-https |
|
Hmm... race issue. |
de8d658 to
90afe0c
Compare
|
/retest passed once. One more time. |
|
/retest |
|
/test pull-knative-serving-https |
|
/test pull-knative-serving-https |
2 similar comments
|
/test pull-knative-serving-https |
|
/test pull-knative-serving-https |
|
Are these HTTPS leg flakes usual? |
|
We were never running these tests correctly so they might actually be legitimate errors? |
|
/test pull-knative-serving-https |
|
Sorry last errors were caused by my wrong commit 4119f08. I reverted it now and so it will not be failed so often. But yes, gRPC and websocket e2e never run tests with TLS correctly. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: markusthoemmes, nak3 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
* Support websocket https * Use TLS for websocket and gRPC tests Current gRPC and Websocket does not use TLS, but still uses HTTP even when it runs with HTTPS mode. This patch fixes it. * Add ServerName to pseudo host with TLS. * Decrease the length of test name * Fix race issue * Add workaround only https * try dialer option * Without parallel * Use a single DialOption * Revert "Without parallel" This reverts commit 99455a6. * Revert "Revert "Without parallel"" This reverts commit 7105cbc. * Fix TestGRPCStreamingPingViaActivator * Do not run gRPC with parallel * Add TODO comment * Use net.SplitHostPort * make long ksvc name generic * Revert "make long ksvc name generic" This reverts commit 4119f08.
* Do not call GetIngressEndpoint() when --resolvabledomain is enabled (knative#11318) `GetIngressEndpoint()` is a function to get ingress endpoint for the spoof client. So we don't need to call it when `--resolvabledomain` is enabled. Especially when Ingresss service uses `ClusterIP`, it alwasy fails to get endpoint and test fails. This patch changes to call GetIngressEndpoint() only when resolvabledomain is false in websocket test. * Use TLS for websocket and gRPC tests (knative#11322) * Support websocket https * Use TLS for websocket and gRPC tests Current gRPC and Websocket does not use TLS, but still uses HTTP even when it runs with HTTPS mode. This patch fixes it. * Add ServerName to pseudo host with TLS. * Decrease the length of test name * Fix race issue * Add workaround only https * try dialer option * Without parallel * Use a single DialOption * Revert "Without parallel" This reverts commit 99455a6. * Revert "Revert "Without parallel"" This reverts commit 7105cbc. * Fix TestGRPCStreamingPingViaActivator * Do not run gRPC with parallel * Add TODO comment * Use net.SplitHostPort * make long ksvc name generic * Revert "make long ksvc name generic" This reverts commit 4119f08.
* Do not call GetIngressEndpoint() when --resolvabledomain is enabled (knative#11318) `GetIngressEndpoint()` is a function to get ingress endpoint for the spoof client. So we don't need to call it when `--resolvabledomain` is enabled. Especially when Ingresss service uses `ClusterIP`, it alwasy fails to get endpoint and test fails. This patch changes to call GetIngressEndpoint() only when resolvabledomain is false in websocket test. * Use TLS for websocket and gRPC tests (knative#11322) * Support websocket https * Use TLS for websocket and gRPC tests Current gRPC and Websocket does not use TLS, but still uses HTTP even when it runs with HTTPS mode. This patch fixes it. * Add ServerName to pseudo host with TLS. * Decrease the length of test name * Fix race issue * Add workaround only https * try dialer option * Without parallel * Use a single DialOption * Revert "Without parallel" This reverts commit 99455a6. * Revert "Revert "Without parallel"" This reverts commit 7105cbc. * Fix TestGRPCStreamingPingViaActivator * Do not run gRPC with parallel * Add TODO comment * Use net.SplitHostPort * make long ksvc name generic * Revert "make long ksvc name generic" This reverts commit 4119f08.
Use TLS for websocket and gRPC tests
Current gRPC and Websocket does not use TLS, but still uses HTTP even
when it runs with HTTPS mode.
This patch fixes it.
FIx #11386