Jorge 42e9bcf2b0 feat(e2e): support the Vault credential-driver lane on OpenShift (#3312) ...

Implements https://github.com/NVIDIA/OpenShell/issues/3212

Running e2e:kubernetes with the Vault credential driver failed on
OpenShift in two ways: the OpenBao fixture pod was rejected by the
restricted-v2 SCC, and provider-creating tests hit HTTP 403 from
auth/kubernetes/login because OpenBao's Kubernetes auth was provisioned
only inside a single feature-gated test.

- Deploy OpenBao with the chart's OpenShift mode (global.openshift=true)
  when OpenShift is detected, so the pod inherits a namespace-assigned,
  SCC-compliant security context with no manual SCC grant. Hoist
  OpenShift detection ahead of the credential-driver fixtures so the
  flag is set before the fixture is deployed.
- Provision the OpenBao KV store, Kubernetes auth method, storage
  policy, and gateway login role in the harness (deploy_vault_fixture),
  making a Vault-backed gateway usable by the whole suite instead of
  only the credential_drivers test. Remove the now-redundant
  configure_vault_storage helper from the test.
- Harden openbao_exec so it tolerates only the idempotent "path is
  already in use" error on reruns and fails fast with output on any
  other error, instead of a blanket `|| true` that masked genuine
  failures (e.g. an unresponsive pod) until a later cryptic write.
- Document the OpenShift Vault credential-store SCC and Kubernetes-auth
  403 troubleshooting in the debug-openshell-cluster skill.

Signed-off-by: Jorge Garcia Oncins <jgarciao@redhat.com>

2026-09-14 21:55:43 +00:00

..

gpu

test(e2e): keep lifecycle sandboxes running (#3128)

2026-09-02 18:58:02 +00:00

bypass_detection.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

cf_auth_smoke.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

cli_smoke.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

community_image.rs

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

core_dump_hardening.rs

fix(sandbox): disable child core dumps (#821)

2026-04-14 22:28:18 -07:00

credential_drivers.rs

feat(e2e): support the Vault credential-driver lane on OpenShift (#3312)

2026-09-14 21:55:43 +00:00

credential_gating.rs

fix(supervisor): classify credential placeholders in request bodies (#3246)

2026-09-10 23:10:01 +00:00

custom_image.rs

refactor(cli): remove local Dockerfile image builds (#3214)

2026-09-09 13:28:17 +00:00

docker_preflight.rs

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

driver_config_volume.rs

fix(podman): resolve macOS Podman socket dynamically (#3135)

2026-09-09 14:10:59 +00:00

edge_tunnel_e2e.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

forward_proxy_graphql_l7.rs

test(e2e): retry transient forward proxy stale policy responses (#1929)

2026-06-16 17:11:58 -07:00

forward_proxy_jsonrpc_l7.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

forward_proxy_l7_bypass.rs

test(e2e): retry transient forward proxy stale policy responses (#1929)

2026-06-16 17:11:58 -07:00

gateway_start.rs

refactor(compute): unify gateway restart reconciliation (#2743)

2026-08-20 10:12:41 +00:00

gpu.rs

test(e2e): run gpu workloads from manifest (#1709)

2026-06-30 09:54:12 +02:00

host_gateway_alias.rs

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

kubernetes_corporate_proxy.rs

feat(kubernetes): support corporate upstream proxy (#2633)

2026-08-14 16:16:43 +00:00

landlock.rs

fix(supervisor): tailor Landlock rights by inode type (#2380)

2026-07-21 03:59:02 +00:00

live_policy_update.rs

refactor(cli): remove local Dockerfile image builds (#3214)

2026-09-09 13:28:17 +00:00

local_driver_token_restart.rs

feat(sandbox): add canonical main process (#2726)

2026-08-20 22:18:23 +00:00

no_proxy.rs

feat: Openshell driver podman (#904)

2026-04-24 10:30:14 -07:00

oidc_pkce.rs

feat(providers): make profiles authoritative (#2962)

2026-09-01 19:22:07 +00:00

podman_corporate_proxy.rs

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

podman_gateway_start.rs

test(e2e): pin direct podman calls to harness socket on macOS (#2909)

2026-08-24 22:04:25 +00:00

podman_oci_identity.rs

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

podman_userns.rs

feat(driver-podman): add userns config (#2562)

2026-08-15 17:10:47 +00:00

port_forward.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

provider_auto_create.rs

test(e2e): keep lifecycle sandboxes running (#3128)

2026-09-02 18:58:02 +00:00

provider_refresh_handles.rs

fix(providers): keep refresh credential handles stable (#2780)

2026-08-18 20:45:36 +00:00

provider_refresh_keycloak.rs

feat(providers): make profiles authoritative (#2962)

2026-09-01 19:22:07 +00:00

provider_token_exchange.rs

feat(providers): make profiles authoritative (#2962)

2026-09-01 19:22:07 +00:00

proxy_egress_pipeline.rs

feat(proxy): bind static credentials to provider endpoints (#2510)

2026-08-10 19:19:45 +00:00

readyz_health.rs

fix(gateway): make readiness health checks dependency-aware (#1328)

2026-05-27 11:00:06 -07:00

rootfs_tar.rs

feat(sandbox): support rootfs tar as --from source for VM driver (#2863)

2026-09-08 22:36:40 +00:00

sandbox_labels.rs

feat(sandbox): add canonical main process (#2726)

2026-08-20 22:18:23 +00:00

sandbox_lifecycle.rs

test(e2e): keep lifecycle sandboxes running (#3128)

2026-09-02 18:58:02 +00:00

sandbox_templates.rs

feat(server): add sandbox templates (#2833)

2026-09-02 00:55:29 +00:00

settings_management.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

sync.rs

fix(cli): fall back to regular upload when git filtering excludes all files (#1783)

2026-06-08 22:16:50 -07:00

transparent_tcp.rs

feat(network): enable Docker and Podman policy DNS and transparent TCP (#2723)

2026-08-20 19:26:53 +00:00

upload_create.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

user_namespaces.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

vm_corporate_proxy.rs

feat(vm): support corporate HTTP forward proxy egress for microVM sandboxes (#3090)

2026-09-02 14:56:08 +00:00

vm_gateway_start.rs

refactor(compute): unify gateway restart reconciliation (#2743)

2026-08-20 10:12:41 +00:00

vm_overlay.rs

test(e2e): keep lifecycle sandboxes running (#3128)

2026-09-02 18:58:02 +00:00

websocket_conformance.rs

feat(proxy): bind static credentials to provider endpoints (#2510)

2026-08-10 19:19:45 +00:00

workspace_lifecycle.rs

feat(providers): make profiles authoritative (#2962)

2026-09-01 19:22:07 +00:00

workspace_namespace_managed.rs

fix(sandbox): complete successful main processes (#2884)

2026-08-28 18:21:20 -07:00

workspace_namespace_operator.rs

fix(sandbox): complete successful main processes (#2884)

2026-08-28 18:21:20 -07:00