linkerd2/cli/cmd/testdata
Andrew Seigner d08dcb0a37
Skip outbound port 443 in control-plane (#2411)
linkerd/linkerd2#2349 introduced a `SelfSubjectAccessReview` check at
startup, to determine whether each control-plane component should
establish Kubernetes watches cluster-wide or namespace-wide. If this
check occurs before the linkerd-proxy sidecar is ready, it fails, and
the control-plane component restarts.

This change configures each control-plane pod to skip outbound port 443
when injecting the proxy, allowing the control-plane to connect to
Kubernetes regardless of the `linkerd-proxy` state.

A longer-term fix should involve a more robust control-plane startup,
that is resilient to failed Kubernetes API requests. An even longer-term
fix could involve injecting `linkerd-proxy` as a Kubernetes "sidecar"
container, when that becomes available.

Workaround for #2407

Signed-off-by: Andrew Seigner <siggy@buoyant.io>
2019-02-27 15:23:19 -08:00
..
inject-filepath destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
check_output.golden Update check command hint URLs to new alias (#2245) 2019-02-11 11:00:16 -08:00
endpoints_all_output.golden Introduce Discovery API and endpoints command (#2195) 2019-02-07 14:02:21 -08:00
endpoints_all_output_json.golden Introduce Discovery API and endpoints command (#2195) 2019-02-07 14:02:21 -08:00
endpoints_one_output.golden Introduce Discovery API and endpoints command (#2195) 2019-02-07 14:02:21 -08:00
endpoints_one_output_json.golden Introduce Discovery API and endpoints command (#2195) 2019-02-07 14:02:21 -08:00
inject_contour.input.yml Added `linkerd uninject` command (#2054) 2019-01-14 17:39:31 -05:00
inject_contour.report Fix Unicode and color output for Windows (#2114) 2019-01-23 09:55:44 -08:00
inject_contour.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_contour_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_already_injected.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_already_injected.input.yml When injecting, perform an uninject as a first step (#2089) 2019-01-17 10:15:23 -08:00
inject_emojivoto_already_injected.report When injecting, perform an uninject as a first step (#2089) 2019-01-17 10:15:23 -08:00
inject_emojivoto_already_injected.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_deployment.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_deployment.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_controller_name.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_controller_name.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_deployment_controller_name.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_deployment_controller_name.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_controller_name_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_deployment_empty_resources.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_empty_resources.input.yml Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_deployment_empty_resources.report Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_deployment_empty_resources.report.verbose Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_deployment_hostNetwork_false.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_hostNetwork_false.input.yml Remove executable bit from non-executable files. (#1335) 2018-07-16 13:55:52 -10:00
inject_emojivoto_deployment_hostNetwork_false.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_deployment_hostNetwork_false.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_hostNetwork_true.input.yml Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_hostNetwork_true.report Fix Unicode and color output for Windows (#2114) 2019-01-23 09:55:44 -08:00
inject_emojivoto_deployment_hostNetwork_true.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_hostNetwork_true_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_deployment_injectDisabled.input.yml Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_injectDisabled.report Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_injectDisabled.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_injectDisabled_uninject.report Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_no_init_container.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_tls.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_udp.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_deployment_udp.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_deployment_udp.report Fix Unicode and color output for Windows (#2114) 2019-01-23 09:55:44 -08:00
inject_emojivoto_deployment_udp.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_deployment_udp_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_deployment_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_istio.input.yml When injecting, perform an uninject as a first step (#2089) 2019-01-17 10:15:23 -08:00
inject_emojivoto_istio.report Fix Unicode and color output for Windows (#2114) 2019-01-23 09:55:44 -08:00
inject_emojivoto_istio.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_istio_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_list.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_list.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_list.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_list.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_list_empty_resources.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_list_empty_resources.input.yml Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_list_empty_resources.report Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_list_empty_resources.report.verbose Ignoring resources with empty kind field. (#2292) 2019-02-19 11:44:28 -08:00
inject_emojivoto_list_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_pod.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_pod.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_pod.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_pod.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_pod_tls.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_pod_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_pod_with_requests.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_pod_with_requests.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_pod_with_requests.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_pod_with_requests.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_pod_with_requests_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_emojivoto_statefulset.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_emojivoto_statefulset.input.yml test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
inject_emojivoto_statefulset.report Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_emojivoto_statefulset.report.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_emojivoto_statefulset_uninject.report Add newline separator above uninject reports (#2104) 2019-01-17 11:12:54 -08:00
inject_gettest_deployment.bad.golden Added `linkerd uninject` command (#2054) 2019-01-14 17:39:31 -05:00
inject_gettest_deployment.bad.golden.verbose Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_gettest_deployment.bad.input.yml Print error message only when invalid YAML file is used with inject command (#389) 2018-02-20 11:59:41 -08:00
inject_gettest_deployment.good.golden.stderr Update check and inject output (#2087) 2019-01-16 15:14:14 -08:00
inject_gettest_deployment.good.golden.stderr.verbose Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
inject_gettest_deployment.good.golden.yml destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_gettest_deployment.good.input.yml Print error message only when invalid YAML file is used with inject command (#389) 2018-02-20 11:59:41 -08:00
install-cni-plugin_default.golden CNI: Removed unnecessary tolerations; added created-by annotation. (#2222) 2019-02-07 13:36:00 -08:00
install-cni-plugin_fully_configured.golden CNI: Removed unnecessary tolerations; added created-by annotation. (#2222) 2019-02-07 13:36:00 -08:00
install-cni-plugin_fully_configured_equal_dsts.golden CNI: Removed unnecessary tolerations; added created-by annotation. (#2222) 2019-02-07 13:36:00 -08:00
install-sp_default.golden Rename linkerd-proxy-api to linkerd-destination (#2281) 2019-02-15 15:11:04 -08:00
install-sp_output.golden Rename linkerd-proxy-api to linkerd-destination (#2281) 2019-02-15 15:11:04 -08:00
install_default.golden Skip outbound port 443 in control-plane (#2411) 2019-02-27 15:23:19 -08:00
install_ha_output.golden Skip outbound port 443 in control-plane (#2411) 2019-02-27 15:23:19 -08:00
install_ha_with_overrides_output.golden Skip outbound port 443 in control-plane (#2411) 2019-02-27 15:23:19 -08:00
install_no_init_container.golden Remove namespace from serviceprofile CRD in install config (#2409) 2019-02-27 14:29:47 -08:00
install_no_init_container_auto_inject.golden Remove namespace from serviceprofile CRD in install config (#2409) 2019-02-27 14:29:47 -08:00
install_output.golden Skip outbound port 443 in control-plane (#2411) 2019-02-27 15:23:19 -08:00
install_single_namespace_output.golden Skip outbound port 443 in control-plane (#2411) 2019-02-27 15:23:19 -08:00
routes_one_output.golden Improve routes command to list all routes (#2066) 2019-01-16 17:15:35 -08:00
routes_one_output_json.golden Improve routes command to list all routes (#2066) 2019-01-16 17:15:35 -08:00
stat_all_output.golden Added support for json output in `linkerd stat` (#1749) 2018-10-15 14:10:48 -07:00
stat_all_output_json.golden Allow stat summary to query for multiple resources (#1841) 2018-11-14 10:44:04 -08:00
stat_one_output.golden Added support for json output in `linkerd stat` (#1749) 2018-10-15 14:10:48 -07:00
stat_one_output_json.golden Allow stat summary to query for multiple resources (#1841) 2018-11-14 10:44:04 -08:00
tap_busy_output.golden Add resource metadata to Tap CLI output (#1437) 2018-08-20 14:25:26 -07:00
tap_busy_output_wide.golden Add resource metadata to Tap CLI output (#1437) 2018-08-20 14:25:26 -07:00
tap_empty_output.golden Make several CLI commands testable (#86) 2017-12-27 14:10:41 -05:00