Skip to content

Commit a150a31

Browse files
eamonnmoloneyclaude
andcommitted
test: replace weak literal connectors password with secretKeyRef in multitenancy scenario
The GKE CI cluster has a ValidatingAdmissionPolicy (deny-weak-password-defaults) that rejects Deployments where a password-named env var is set to a known default or a value shorter than 12 characters. The connectors env var `password: password` was triggering this policy, causing the kemt (keycloak-mt) scenario to fail on Helm install across all chart versions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent e7091f2 commit a150a31

5 files changed

Lines changed: 20 additions & 5 deletions

File tree

  • charts
    • camunda-platform-8.10/test/integration/scenarios/chart-full-setup/values/features
    • camunda-platform-8.6/test/integration/scenarios/chart-full-setup/values/features
    • camunda-platform-8.7/test/integration/scenarios/chart-full-setup/values/features
    • camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values/features
    • camunda-platform-8.9/test/integration/scenarios/chart-full-setup/values/features

charts/camunda-platform-8.10/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,9 @@ connectors:
3333
- name: username
3434
value: username
3535
- name: password
36-
value: password
36+
valueFrom:
37+
secretKeyRef:
38+
name: integration-test-credentials
39+
key: password
3740
- name: CAMUNDA_CLIENT_WORKER_DEFAULTS_TENANTIDS
3841
value: "<default>, Tenant_Main_Connectors, Tenant_Second_Connectors, Tenant_1_Connectors, Tenant_2_Connectors"

charts/camunda-platform-8.6/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,9 @@ connectors:
4545
- name: username
4646
value: username
4747
- name: password
48-
value: password
48+
valueFrom:
49+
secretKeyRef:
50+
name: integration-test-credentials
51+
key: password
4952
- name: ZEEBE_CLIENT_DEFAULT_JOB_WORKER_TENANT_IDS
5053
value: "<default>, Tenant_Main_Connectors, Tenant_Second_Connectors, Tenant_1_Connectors, Tenant_2_Connectors"

charts/camunda-platform-8.7/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,9 @@ connectors:
4242
- name: username
4343
value: username
4444
- name: password
45-
value: password
45+
valueFrom:
46+
secretKeyRef:
47+
name: integration-test-credentials
48+
key: password
4649
- name: CAMUNDA_CLIENT_ZEEBE_DEFAULTS_TENANTIDS
4750
value: "<default>, Tenant_Main_Connectors, Tenant_Second_Connectors, Tenant_1_Connectors, Tenant_2_Connectors"

charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,9 @@ connectors:
4545
- name: username
4646
value: username
4747
- name: password
48-
value: password
48+
valueFrom:
49+
secretKeyRef:
50+
name: integration-test-credentials
51+
key: password
4952
- name: ZEEBE_CLIENT_DEFAULT_JOB_WORKER_TENANT_IDS
5053
value: "<default>, Tenant_Main_Connectors, Tenant_Second_Connectors, Tenant_1_Connectors, Tenant_2_Connectors"

charts/camunda-platform-8.9/test/integration/scenarios/chart-full-setup/values/features/multitenancy.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,9 @@ connectors:
4545
- name: username
4646
value: username
4747
- name: password
48-
value: password
48+
valueFrom:
49+
secretKeyRef:
50+
name: integration-test-credentials
51+
key: password
4952
- name: CAMUNDA_CLIENT_WORKER_DEFAULTS_TENANTIDS
5053
value: "<default>, Tenant_Main_Connectors, Tenant_Second_Connectors, Tenant_1_Connectors, Tenant_2_Connectors"

0 commit comments

Comments
 (0)