kxk-4498/venafi-test-wizard

A testing tool for cert-manager in Kubernetes

venafi-test-wizard's Issues

[APPLICATIONS] Deploy applications in the cluster that asks for cert from sample issuer

[NETWORK CHAOS] Research: Way to introduce network delays/losses from chaos issuer to controller

[CHAOS ISSUER] Test the self-signed chaos issuer

Deploy sample external issuer

[CHAOS ISSUER] Implement self-signed issuer

[APPLICATIONS] Decide on applications to test

add test folder to main branch - push service.yaml, ingress.yaml, deployment.yaml

[APPLICATIONS] Set up a new self-signed issuer and certificate

[CODE DESIGN] Add test folder to main branch - push service.yaml, ingress.yaml, deployment.yaml

Build base tool to deploy cluster with cert-manager

use the custom deploy capabilities given in cert-manager and start working on custom-issuer

[CSR SCENARIO] Research when issuer cannot sign the certificate - CSR 2

[CLI] Write a script to fetch the Prometheus metrics

[E2E] Implement end-to-end scenario for CSR #3 i.e. when the issuer sleeps

[CODE REVIEW] Review Steady state code, install dependencies and run the repo

[CLI] All scripts to work with Windows and zsh as well

[STEADY STATE] Blocker: Get issuer to sign the certificate

[CHAOS SCENARIOS] Push chaos scenario documentation to Git

[APPLICATIONS] Extend the applications to our chaos issuer

[CODE REVIEW] Review Steady state code, install dependencies and run the repo

Research: Different chaotic scenarios within cert-manager

Look into chaos mesh and discover different chaotic scenarios. Examples/suggestions to look into:

1. Stress tests
2. Network delays
3. Time-bound delays
4. Volume-bound
5. issuer is killed, how would that impact cert-manager

[CLI] Write a script to deploy multiple certificates concurrently

[DESIGN] Sequence diagram for the network packet loss end-to-end scenario

Research: Find limitations of cert-manager

[CODE REVIEW] Go through Steady State code

[APPLICATIONS] Deploy a real-world application integrated with chaos issuer for end-to-end scenario

[APPLICATIONS] Integrate applications with cert-manager

[SYSTEM DESIGN] Architecture diagram

[CHAOS SCENARIOS] Find different chaos scenarios we can implement

Look into external issuer code base

[DESIGN] Draw the sequence diagram for all 5 identified scenarios

[CSR SCENARIO] Implement CSR scenario 2

[DEMO] The application requests a certificate

[NETWORK CHAOS] Research on how to implement network chaos without chaos mesh

[PROMETHEUS] Deploy Prometheus to capture metrics with and without chaos

[CODE REVIEW] Review Steady state code, install dependencies and run the repo

[CHAOS SCENARIOS] Prioritize which chaos scenario to implement first

[CSR SCENARIO] Implement CSR scenario 3

[CLI] Base script to deploy an issuer and certificate

[E2E] Design and generate a report at the end of the experiment

[CODE REVIEW] Review Steady state code, install dependencies and run the repo

[DEMO] Expose an application using ingress

[CLI] Write a script to deploy the issuer with its configuration of chaos

[CSR SCENARIO] Implement CSR scenario 1

[DESIGN] Re-do the architecture diagram to add more details about the chaos-issuer

Jing's comment here: https://community.venafi.com/cmu-developers-cert-manager-chaos-issuer-25/architectural-desgin-and-flow-diagram-for-a-steady-state-1466

“with the only difference being the issuer is our custom issuer.” this was what I figured. To help others (not necessarily Kevin or Sitaram) getting it and being certain about it, I recommend you pack the known normal flow and components in the setup because they are known and agreed upon (e.g. put them into big boxes such as “deploy app”, “deploy certificate configuration”) and unpack the chaos issuer part that we need to know more about. Use proper color coding, for example, any original components with one color, your custom components a different color. Also, accompany it with a color legend.

[CHAOS ISSUER] Research on how to make chaos issuer self-signed certificates

[DEMO] Get the certificate issued from cert manager

[NETWORK SCENARIO] Implement Traffic Controller for chaos issuer

[CHAOS SCENARIOS] Share the example yaml file for the chaos scenarios

Research: Applications that will ask for certs from cert-manager

[STEADY STATE] Create the Work Breakdown Structure

Deploy multiple certs on the issuer (self-signed, external issuer)