Deploy DAP by default for backwards compatibility about kubernetes-conjur-deploy HOT 9 OPEN

@orenbm, this is a great set of items. It feels like we need to be a bit more explicit about the stated purpose of each of these key project:

1. kubernetes-conjur-deloy
2. kubernetes-conjur-demo
3. secrets-provider-for-k8s
   That's outside the scope of the work you're describing here.

from kubernetes-conjur-deploy.

Challenge the way we deploy the OSS cluster. It may be different than the way described in the docs

The kubernetes-conjur-deloy project references Helm. With this shift, we'll need to provide two sets of documented options for OSS Conjur.

from kubernetes-conjur-deploy.

Are we deploying tests into OpenShift as well as Kubernetes?

from kubernetes-conjur-deploy.

Are we deploying tests into OpenShift as well as Kubernetes?
Yes

from kubernetes-conjur-deploy.

@izgeri @jasongarabedian - Please see if and how you want to promote this task and give it the needed priority

@orenbm - Thanks for putting all this information together

from kubernetes-conjur-deploy.

When this effort is done - also continue working on this PR: conjurdemos/kubernetes-conjur-demo#78

It uses the changes in deploy to run tests in demo

from kubernetes-conjur-deploy.

@Tovli I think you meant @jvanderhoof

We should use a separate repo for deploying OSS. Can you ask in Slack which would be appropriate? We have the helm chart, the docker-compose for the quick start, I think a few people (in the field? devs?) have their own repos they use for deploying it, @doodlesbykumbi one time created this POC in Secretless (not merged) - having a single canonical repo for OSS deploys (like we have this repo for deploying DAP followers) makes sense. I suspect you could just use the helm chart in your automation and call it a day.

I don't think OSS deploy tools belong in this repo.

from kubernetes-conjur-deploy.

Thanks @izgeri, I am really want to raise the lack of OSS test in k8s and trying to understand who should be assigned such task.
We did try to deploy using the helm chart but found the kubernetes-conjur-deploy repo easier to work with
@jvanderhoof - Please consider if you want to progress this task, I'll be happy to assist

from kubernetes-conjur-deploy.

for Secretless OSS support, we tested manually and left automated tests for a future effort. since our group owns the OSS, I would really love for this group to be able to define what appropriate automated e2e tests are for OSS and own that going forward - it is just a little tricky right now because we are staffed on other projects.

I will wait for @jvanderhoof to weigh in further before saying more, but I really don't think OSS deploy tools belong in this repo.

from kubernetes-conjur-deploy.