Skip to content

Commit 10a24a9

Browse files
alebedev87bertinatto
authored andcommitted
OCPBUGS-49441: Use different certificates for gRPC interoperability test routes
Before this change the gRPC routes were using the same certificate which prevented the usage of ALPN to avoid the connection coalescing. This commit introduces different certificates for edge and reencrypt routes.
1 parent d4dc5fe commit 10a24a9

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

test/extended/router/grpc-interop.go

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -187,6 +187,15 @@ var _ = g.Describe("[sig-network-edge][Conformance][Area:Networking][Feature:Rou
187187
pemCrt, err := certgen.MarshalCertToPEMString(tlsCrtData)
188188
o.Expect(err).NotTo(o.HaveOccurred())
189189

190+
_, tlsCrt2Data, tlsPrivateKey2, err := certgen.GenerateKeyPair("Root CA", notBefore, notAfter)
191+
o.Expect(err).NotTo(o.HaveOccurred())
192+
193+
derKey2, err := certgen.MarshalPrivateKeyToDERFormat(tlsPrivateKey2)
194+
o.Expect(err).NotTo(o.HaveOccurred())
195+
196+
pemCrt2, err := certgen.MarshalCertToPEMString(tlsCrt2Data)
197+
o.Expect(err).NotTo(o.HaveOccurred())
198+
190199
shardFQDN := oc.Namespace() + "." + defaultDomain
191200

192201
g.By("Creating routes to test for gRPC interoperability")
@@ -253,8 +262,8 @@ var _ = g.Describe("[sig-network-edge][Conformance][Area:Networking][Feature:Rou
253262
TLS: &routev1.TLSConfig{
254263
Termination: routev1.TLSTerminationReencrypt,
255264
InsecureEdgeTerminationPolicy: routev1.InsecureEdgeTerminationPolicyRedirect,
256-
Key: derKey,
257-
Certificate: pemCrt,
265+
Key: derKey2,
266+
Certificate: pemCrt2,
258267
},
259268
To: routev1.RouteTargetReference{
260269
Kind: "Service",

0 commit comments

Comments
 (0)