test(e2e): mTLS datapath scenario for Kind#339

Merged

Agent-Hellboy merged 21 commits into

mainfrom

test/mtls_e2e_datapath

Jul 3, 2026

Commits on Jul 1, 2026

test(e2e): add mtls datapath scenario for Kind

Agent-Hellboy
and
cursoragent
committed
fix(operator): track IngressRoute for mTLS readiness; harden mtls e2e

Agent-Hellboy
and
claude
committed
fix(test): drop unused web port-forward from mtls e2e scenario

Agent-Hellboy
and
claude
committed
fix(test): point mtls policy waits at the mtls server's policy ConfigMap

Agent-Hellboy
and
claude
committed
fix(cli): propagate MCP_MTLS_CLUSTER_ISSUER into sentinel ConfigMap

Agent-Hellboy
and
claude
committed
fix(services-api): send PEM-encoded CSR to cert-manager for adapter certs

Agent-Hellboy
and
claude
committed
test(e2e): archive mtls control-plane diagnostics on failure

Agent-Hellboy
and
claude
committed
fix(test): extract mtls session name with a strict token class

Agent-Hellboy
and
claude
committed
fix(test): reach mtls datapath over ingress host with client-cert SNI

Agent-Hellboy
and
claude
committed
fix(ci): enable Traefik CRD provider + spiffe plugin in http ingress overlay

Agent-Hellboy
and
claude
committed
test(e2e): expand mtls failure diagnostics with Traefik routing + replay

Agent-Hellboy
and
claude
committed
test(mcp-gateway): make cert-reload watch test race-proof

Agent-Hellboy
and
claude
committed
fix(ci): grant Traefik RBAC for all CRD kinds in both API groups

Agent-Hellboy
and
claude
committed
fix(operator): IngressRoute must use Service port not gateway container port

Agent-Hellboy
and
claude
committed

Commits on Jul 2, 2026

Commits on Jul 3, 2026

fix(test): use gateway metrics to confirm policy reload, not kubectl exec cat

Agent-Hellboy
and
claude
committed