@@ -200,7 +200,7 @@ var (
200200 }]
201201 }` ,
202202 // example data seeded from
203- // https://github.com/istio/istio/blob/master /pkg/istio-agent/testdata/grpc-bootstrap.json
203+ // https://github.com/istio/istio/blob/877e8df49d7ead6040ae812ae03ce1bad9ea2bfb /pkg/istio-agent/testdata/grpc-bootstrap.json
204204 "istioStyleInsecureWithJWTCallCreds" : `
205205 {
206206 "node": {
@@ -364,28 +364,8 @@ var (
364364 },
365365 },
366366 }
367- jwtCallCreds , _ = jwt .NewTokenFileCallCredentials ("/var/run/secrets/tokens/istio-token" )
368- selectedJWTCallCreds = []credentials.PerRPCCredentials {jwtCallCreds }
369- configWithIstioJWTCallCreds = & Config {
370- xDSServers : []* ServerConfig {{
371- serverURI : "unix:///etc/istio/XDS" ,
372- channelCreds : []ChannelCreds {{Type : "insecure" }},
373- callCredsConfigs : []CallCredsConfig {{Type : "jwt_token_file" , Config : json .RawMessage ("{\n \" jwt_token_file\" : \" /var/run/secrets/tokens/istio-token\" \n }" )}},
374- serverFeatures : []string {"xds_v3" },
375- selectedChannelCreds : ChannelCreds {Type : "insecure" },
376- selectedCallCreds : selectedJWTCallCreds ,
377- }},
378- node : node {
379- ID : "sidecar~127.0.0.1~pod1.fake-namespace~fake-namespace.svc.cluster.local" ,
380- Metadata : istioNodeMetadata ,
381- userAgentName : gRPCUserAgentName ,
382- userAgentVersionType : userAgentVersion {UserAgentVersion : grpc .Version },
383- clientFeatures : []string {clientFeatureNoOverprovisioning , clientFeatureResourceWrapper },
384- },
385- certProviderConfigs : map [string ]* certprovider.BuildableConfig {},
386- clientDefaultListenerResourceNameTemplate : "%s" ,
387- }
388-
367+ jwtCallCreds , _ = jwt .NewTokenFileCallCredentials ("/var/run/secrets/tokens/istio-token" )
368+ selectedJWTCallCreds = []credentials.PerRPCCredentials {jwtCallCreds }
389369 configWithIstioStyleNoCallCreds = & Config {
390370 xDSServers : []* ServerConfig {{
391371 serverURI : "unix:///etc/istio/XDS" ,
@@ -403,26 +383,6 @@ var (
403383 certProviderConfigs : map [string ]* certprovider.BuildableConfig {},
404384 clientDefaultListenerResourceNameTemplate : "%s" ,
405385 }
406-
407- configWithIstioStyleWithTLSAndJWT = & Config {
408- xDSServers : []* ServerConfig {{
409- serverURI : "unix:///etc/istio/XDS" ,
410- channelCreds : []ChannelCreds {{Type : "tls" , Config : json .RawMessage ("{}" )}},
411- callCredsConfigs : []CallCredsConfig {{Type : "jwt_token_file" , Config : json .RawMessage ("{\n \" jwt_token_file\" : \" /var/run/secrets/tokens/istio-token\" \n }" )}},
412- serverFeatures : []string {"xds_v3" },
413- selectedChannelCreds : ChannelCreds {Type : "tls" , Config : json .RawMessage ("{}" )},
414- selectedCallCreds : selectedJWTCallCreds ,
415- }},
416- node : node {
417- ID : "sidecar~127.0.0.1~pod1.fake-namespace~fake-namespace.svc.cluster.local" ,
418- Metadata : istioNodeMetadata ,
419- userAgentName : gRPCUserAgentName ,
420- userAgentVersionType : userAgentVersion {UserAgentVersion : grpc .Version },
421- clientFeatures : []string {clientFeatureNoOverprovisioning , clientFeatureResourceWrapper },
422- },
423- certProviderConfigs : map [string ]* certprovider.BuildableConfig {},
424- clientDefaultListenerResourceNameTemplate : "%s" ,
425- }
426386)
427387
428388func fileReadFromFileMap (bootstrapFileMap map [string ]string , name string ) ([]byte , error ) {
@@ -596,6 +556,45 @@ func (s) TestGetConfiguration_IstioStyleWithCallCreds(t *testing.T) {
596556 cancel := setupBootstrapOverride (v3BootstrapFileMap )
597557 defer cancel ()
598558
559+ configWithIstioJWTCallCreds := & Config {
560+ xDSServers : []* ServerConfig {{
561+ serverURI : "unix:///etc/istio/XDS" ,
562+ channelCreds : []ChannelCreds {{Type : "insecure" }},
563+ callCredsConfigs : []CallCredsConfig {{Type : "jwt_token_file" , Config : json .RawMessage ("{\n \" jwt_token_file\" : \" /var/run/secrets/tokens/istio-token\" \n }" )}},
564+ serverFeatures : []string {"xds_v3" },
565+ selectedChannelCreds : ChannelCreds {Type : "insecure" },
566+ selectedCallCreds : selectedJWTCallCreds ,
567+ }},
568+ node : node {
569+ ID : "sidecar~127.0.0.1~pod1.fake-namespace~fake-namespace.svc.cluster.local" ,
570+ Metadata : istioNodeMetadata ,
571+ userAgentName : gRPCUserAgentName ,
572+ userAgentVersionType : userAgentVersion {UserAgentVersion : grpc .Version },
573+ clientFeatures : []string {clientFeatureNoOverprovisioning , clientFeatureResourceWrapper },
574+ },
575+ certProviderConfigs : map [string ]* certprovider.BuildableConfig {},
576+ clientDefaultListenerResourceNameTemplate : "%s" ,
577+ }
578+ configWithIstioStyleWithTLSAndJWT := & Config {
579+ xDSServers : []* ServerConfig {{
580+ serverURI : "unix:///etc/istio/XDS" ,
581+ channelCreds : []ChannelCreds {{Type : "tls" , Config : json .RawMessage ("{}" )}},
582+ callCredsConfigs : []CallCredsConfig {{Type : "jwt_token_file" , Config : json .RawMessage ("{\n \" jwt_token_file\" : \" /var/run/secrets/tokens/istio-token\" \n }" )}},
583+ serverFeatures : []string {"xds_v3" },
584+ selectedChannelCreds : ChannelCreds {Type : "tls" , Config : json .RawMessage ("{}" )},
585+ selectedCallCreds : selectedJWTCallCreds ,
586+ }},
587+ node : node {
588+ ID : "sidecar~127.0.0.1~pod1.fake-namespace~fake-namespace.svc.cluster.local" ,
589+ Metadata : istioNodeMetadata ,
590+ userAgentName : gRPCUserAgentName ,
591+ userAgentVersionType : userAgentVersion {UserAgentVersion : grpc .Version },
592+ clientFeatures : []string {clientFeatureNoOverprovisioning , clientFeatureResourceWrapper },
593+ },
594+ certProviderConfigs : map [string ]* certprovider.BuildableConfig {},
595+ clientDefaultListenerResourceNameTemplate : "%s" ,
596+ }
597+
599598 tests := []struct {
600599 name string
601600 wantConfig * Config
0 commit comments