Skip to content

Update OIDC test fixture#89526

Merged
jakelandis merged 5 commits intoelastic:mainfrom
jakelandis:c2id_fix
Aug 23, 2022
Merged

Update OIDC test fixture#89526
jakelandis merged 5 commits intoelastic:mainfrom
jakelandis:c2id_fix

Conversation

@jakelandis
Copy link
Copy Markdown
Contributor

@jakelandis jakelandis commented Aug 23, 2022

This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com. As part of this change some of the docker image demo
login has changed from prior versions and the test code is updated accordingly.

fixes #89477
reverts #89478 / e949dff.


To figure out the required changes I setup a local proxy to watch traffic and manually executed some of the workflows and adjusted the test setup accordingly.
When run as a suite of tests depending on order some tests would fail... I found that setting op.authz.alwaysPromptForConsent=true and op.authz.alwaysPromptForAuth=true allows for the tests to pass consistently.

Buildscan with only these tests: https://gradle-enterprise.elastic.co/s/xnysxq5b2m6za

@jakelandis jakelandis added >test Issues or PRs that are addressing/adding tests :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) v8.5.0 labels Aug 23, 2022
@jakelandis jakelandis requested a review from jkakavas August 23, 2022 05:31
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Aug 23, 2022
Copy link
Copy Markdown
Contributor

@jkakavas jkakavas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jakelandis jakelandis added :Security/IdentityProvider Identity Provider (SSO) project in X-Pack v7.17.6 v8.3.4 v8.4.1 auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) auto-backport-and-merge and removed :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) labels Aug 23, 2022
@jakelandis jakelandis merged commit b557d20 into elastic:main Aug 23, 2022
@jakelandis jakelandis deleted the c2id_fix branch August 23, 2022 14:29
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes elastic#89477
reverts elastic#89478 / e949dff.
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes elastic#89477
reverts elastic#89478 / e949dff.
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

💔 Backport failed

Status Branch Result
7.17 Commit could not be cherrypicked due to conflicts
8.3
8.4

You can use sqren/backport to manually backport by running backport --upstream elastic/elasticsearch --pr 89526

elasticsearchmachine pushed a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
elasticsearchmachine pushed a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
@mark-vieira
Copy link
Copy Markdown
Contributor

Thanks, Jake! It's worth noting that this issue still exists since we still aren't using a docker image that provides an aarch64 build.

jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo
login has changed from prior versions and the test code is updated accordingly.

fixes elastic#89477
reverts elastic#89478 / e949dff.
jakelandis added a commit that referenced this pull request Aug 23, 2022
This commit updates the OIDC test fixture to use the latest demo docker image
from https://connect2id.com.  As part of this change some of the docker image demo 
login has changed from prior versions and the test code is updated accordingly. 

fixes #89477
reverts #89478 / e949dff.
jakelandis added a commit that referenced this pull request Nov 2, 2022
This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: #89526
part of: #71378
jakelandis added a commit to jakelandis/elasticsearch that referenced this pull request Nov 3, 2022
This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: elastic#89526
part of: elastic#71378
elasticsearchmachine pushed a commit that referenced this pull request Nov 3, 2022
…1292)

This commit updates the c2id docker image to the latest released version.
This commit also introduces a multi-stage build with the openjdk image that
supports ARM architectures. So our oidc tests now supports multiple archtectures.

related: #89526
part of: #71378
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) :Security/IdentityProvider Identity Provider (SSO) project in X-Pack Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v7.17.6 v8.3.4 v8.4.1 v8.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

OpenID Connect integration tests failing due to missing fixture Docker image

4 participants