• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

prisma-risk / tsoracle / 26472982281
95%

Build:
DEFAULT BRANCH: main
Ran 26 May 2026 08:28PM UTC
Jobs 1
Files 89
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

26 May 2026 08:22PM UTC coverage: 94.991% (-0.3%) from 95.243%
26472982281

push

github

web-flow
test(kube-e2e): add TLS-enabled deploy cell + verify chart secure-by-default render (#514)

Closes #483.

The kube-e2e workflow previously had only the insecure cell, which passed
`tls.allowInsecurePeer=true` to opt out of #452's secure-by-default render
guard without a comment explaining the choice. This adds:

  1. an explanatory comment on the existing insecure cell;
  2. a second cell in the same kind cluster (release `tsoracle-tls` in
     namespace `e2e-tls`) that mints test certs on the runner via a new
     `kube-e2e-driver` `gen-certs` binary (rcgen, fan-SAN leaf covering
     every pod FQDN), creates a `tsoracle-tls-certs` Secret, installs the
     chart with `tls.enabled=true,tls.secretName=...`, and runs the same
     cold-start + soak + sigkill + dynamic-membership assertion lane.

The TLS cell exercises the chart render guard's happy path, the peer
mTLS handshake under realistic kube DNS / Pod-IP rotation, and cross-pod
trust via the cluster-dedicated peer CA model from PR #445.

run-assertions.sh is now parameterised by `RELEASE` and `JOB_DIR` env
vars; defaults preserve the insecure cell's prior behaviour. The driver
gains `--tls-ca`/`--tls-cert`/`--tls-key` flags wired through every soak
mode; clap's `requires` keeps the mTLS pair all-or-nothing. The cert is
minted with `--replicas 4` so the dynamic-membership scale-up to 4 stays
within the SAN list and does not surface as an SNI flake.

31 of 70 new or added lines in 1 file covered. (44.29%)

13445 of 14154 relevant lines covered (94.99%)

406658.76 hits per line

Uncovered Changes

Lines Coverage ∆ File
39
44.29
e2e/kube/driver/src/bin/gen-certs.rs
Jobs
ID Job ID Ran Files Coverage
1 26472982281.1 26 May 2026 08:28PM UTC 89
94.99
GitHub Action Run
Source Files on build 26472982281
  • Tree
  • List 89
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #26472982281
  • 8c4ee2f7 on github
  • Prev Build on main (#26472446595)
  • Next Build on main (#26473683701)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc