[Feature Request] KaaS conformance tests with other providers/implementations

[martinmo]

At the moment, conformance tests run as part of our Zuul E2E tests and only for the reference implementation. Other implementations and clouds should be included, e.g., Gardener on REGIO.cloud.

CC @tonifinger

[mbuechse]

@mxmxchere Can you provide us with a cluster or two? Ideally, one for each active k8s branch, but if we could use some kind of self-service (API) to create and tear down clusters ad-hoc for our conformance tests, that would be even better.

[mxmxchere]

Sounds like a perfect use case for the moin-cluster. The cluster comes pre-deployed with a few (currently one, planned are more) clusterstacks. You can login via oidc. Some namespaces are pre-equipped with credentials for gx-scs. You can find infos here. To access the predeployed namespaces you have to be member of the team moin-cluster-all-playgrounds. Btw @jschoone will host a little intro presentation on how to use the cluster in tomorrows community-call. A bulk-PR to add people to the all-playgrounds-team is also planned.

[martinmo]

@mxmxchere I am already part of the moin-cluster-playground1 team, but with the kubeconfig described in the usage I can't list the pods:

$ kubectl get pods
Error from server (Forbidden): pods is forbidden: User "oidc:martinmo" cannot list resource "pods" in API group "" in the namespace "default"

I also tried namespaces playground1 and kaas-playground1 with the same result. OIDC login via GitHub worked as expected, however.

[martinmo]

Infos from today's Container Call:

Currently, there is some restructuring going on in the Moin cluster and the moin-cluster-playground1 team has no access anymore. Instead, it is planned to create the team as outlined above. This will be announced in a lightning talk today.

For getting access to Gardener based clusters we can use Plusserver PSKE or regiocloud. Credentials can be obtained from @joshmue and @mxmxchere, respectively.

[mbuechse]

Yes, please! Go ahead.