Skip to content

docs: add WIF testing documentation for issue #1364#1371

Merged
chris-rock merged 4 commits intomainfrom
docs/wif-testing-guide
Feb 11, 2026
Merged

docs: add WIF testing documentation for issue #1364#1371
chris-rock merged 4 commits intomainfrom
docs/wif-testing-guide

Conversation

@chris-rock
Copy link
Copy Markdown
Member

@chris-rock chris-rock commented Feb 5, 2026

Add comprehensive documentation for testing Workload Identity Federation:

  • Local testing without cloud infrastructure section
    • Unit test commands for WIF functionality
    • Resource verification testing using k3d
    • Tests for GKE, EKS, and AKS WIF resource creation
    • Validation testing for invalid configurations
  • WIF testing checklist (local vs cloud required)
  • Test Method 6: GKE Workload Identity guide
    • Step-by-step setup with gcloud commands
    • GSA creation and IAM binding
    • Troubleshooting guide and cleanup instructions

fixes #1364

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 5, 2026

Test Results

  5 files  ±0   41 suites  ±0   33m 48s ⏱️ +41s
301 tests ±0  301 ✅ ±0  0 💤 ±0  0 ❌ ±0 
320 runs  ±0  318 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit 4bb32bc. ± Comparison against base commit feff81f.

♻️ This comment has been updated with latest results.

@chris-rock chris-rock force-pushed the docs/wif-testing-guide branch from 6c83b4e to 69e9e64 Compare February 6, 2026 11:05
@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

chris-rock and others added 4 commits February 6, 2026 16:34
Add comprehensive documentation for testing Workload Identity Federation:

- Local testing without cloud infrastructure section
  - Unit test commands for WIF functionality
  - Resource verification testing using k3d
  - Tests for GKE, EKS, and AKS WIF resource creation
  - Validation testing for invalid configurations
- WIF testing checklist (local vs cloud required)
- Test Method 6: GKE Workload Identity guide
  - Step-by-step setup with gcloud commands
  - GSA creation and IAM binding
  - Troubleshooting guide and cleanup instructions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Remove redundant local testing section that duplicates unit test coverage
and add key implementation details to cloud provider sections.

Changes:
- Replace verbose local testing section with pointer to unit tests
- Add key details (annotations, images, commands) to GKE/EKS/AKS sections
- Fix init container name references (wif-init -> generate-kubeconfig)
- Add WIF Testing Summary table
- Rename test methods: AKS (8), EKS (7), GKE (6)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Renumber test methods to be sequential (4, 5, 6) instead of
backwards (8, 7, 6). Also reorder the summary table to match.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add Terraform modules under tests/terraform/wif/ for automated
provisioning of WIF test clusters (GKE, GKE Autopilot, EKS, AKS).
Each module creates a management + target cluster pair with all
necessary IAM/RBAC plumbing and outputs a MondooAuditConfig snippet.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@chris-rock chris-rock force-pushed the docs/wif-testing-guide branch from 245dace to 4bb32bc Compare February 6, 2026 15:59
@chris-rock
Copy link
Copy Markdown
Member Author

This requires further testing, we are merging this in so that we can test it with new features more easily.

@chris-rock chris-rock merged commit 597c183 into main Feb 11, 2026
24 checks passed
@chris-rock chris-rock deleted the docs/wif-testing-guide branch February 11, 2026 13:27
@github-actions github-actions Bot locked and limited conversation to collaborators Feb 11, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test WIF

1 participant