WIP

Signed-off-by: Richard Wall <[email protected]>

Author: wallrj

.gitignore

@@ -15,3 +15,4 @@ predicate.json
 
 _bin
 .envrc
+.env

deploy/charts/venafi-kubernetes-agent/templates/deployment.yaml

@@ -53,12 +53,22 @@ spec:
             valueFrom:
               secretKeyRef:
                 name: {{ .Values.authentication.secretName }}
-                key: username
+                key: ARK_USERNAME
           - name: ARK_SECRET
             valueFrom:
               secretKeyRef:
                 name: {{ .Values.authentication.secretName }}
-                key: password
+                key: ARK_SECRET
+          - name: ARK_PLATFORM_DOMAIN
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.authentication.secretName }}
+                key: ARK_PLATFORM_DOMAIN
+          - name: ARK_SUBDOMAIN
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.authentication.secretName }}
+                key: ARK_SUBDOMAIN
           {{- with .Values.http_proxy }}
           - name: HTTP_PROXY
             value: {{ . }}

hack/e2e/ca/config.yaml

@@ -0,0 +1,3 @@
+machineHub:
+  subdomain: tlskp-test
+  credentialsSecretName: todo-unused

hack/e2e/ca/test.sh

@@ -7,7 +7,8 @@ set -o pipefail
 # CyberArk API configuration
 : ${ARK_USERNAME?}
 : ${ARK_SECRET?}
-: ${ARK_API_URL?}
+: ${ARK_PLATFORM_DOMAIN?}
+: ${ARK_SUBDOMAIN?}
 
 # The base URL of the OCI registry used for Docker images and Helm charts
 # E.g. ttl.sh/6ee49a01-c8ba-493e-bae9-4d8567574b56
@@ -36,8 +37,10 @@ kubectl create ns "$k8s_namespace" || true
 
 kubectl create secret generic agent-credentials \
         --namespace "$k8s_namespace" \
-        --from-literal=username=$ARK_USERNAME \
-        --from-literal=password=$ARK_SECRET
+        --from-literal=ARK_USERNAME=$ARK_USERNAME \
+        --from-literal=ARK_SECRET=$ARK_SECRET \
+        --from-literal=ARK_PLATFORM_DOMAIN=$ARK_PLATFORM_DOMAIN \
+        --from-literal=ARK_SUBDOMAIN=$ARK_SUBDOMAIN
 
 helm upgrade agent "oci://${OCI_BASE}/charts/venafi-kubernetes-agent" \
      --install \
@@ -54,7 +57,3 @@ yq eval-all '. as $item ireduce ({}; . * $item)' config.original.yaml "${script_
 kubectl delete cm -n "$k8s_namespace" agent-config
 kubectl create cm -n "$k8s_namespace" agent-config --from-file=config.yaml
 kubectl scale -n "$k8s_namespace" deployment agent  --replicas=1
-
-
-
-