stacklok / toolhive / 19892531401 / 1
60%
main: 60%

DEFAULT BRANCH: main
Ran
Files 391
Run time 15s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 50.112% (+0.005%) from 50.107%
19892531401.1

push

github

web-flow 
Fix VirtualMCPServer OIDC configuration by implementing OIDCConfigurable interface (#2821)

* Add mockgen directive for OIDC Resolver interface

Add go:generate directive to generate gomock mock for the oidc.Resolver
interface. This enables proper unit testing of components that depend on
OIDC resolution without requiring a real Kubernetes client.

* Add OIDCConfigurable interface implementation to VirtualMCPServer

Implement GetOIDCConfig() and GetProxyPort() methods on VirtualMCPServer
to satisfy the oidc.OIDCConfigurable interface. This allows the OIDC
resolver to resolve Kubernetes and ConfigMap OIDC configurations for
VirtualMCPServer resources.

GetProxyPort returns 4483, the default vMCP server port.

* Refactor Converter to require OIDC resolver for all OIDC types

Previously, the Converter only handled inline OIDC configuration directly
and had a TODO for kubernetes and configMap types. This change:

- Makes oidcResolver a required parameter for NewConverter (returns error
  if nil)
- Uses the resolver for all OIDC types (kubernetes, configMap, inline)
- Adds mapResolvedOIDCToVmcpConfig() to map resolver output to vmcp config
- Handles ClientSecretEnv for all OIDC types that may have client secrets
- Updates controller to pass OIDC resolver to converter
- Adds comprehensive tests using gomock for OIDC resolution
- Adds compile-time interface assertion for VirtualMCPServer

This ensures fail-closed behavior: if OIDC is configured but resolution
fails, the converter returns an error rather than silently deploying
without authentication.

26055 of 51994 relevant lines covered (50.11%)

60.29 hits per line

Source Files on job 19892531401.1