test: annotate insecure test-only credentials

Author: kvinwang

dstack/gateway/test-run/e2e/configs/gateway-1.toml

@@ -19,9 +19,11 @@ rpc_domain = "gateway-1"
 enabled = true
 port = 9016
 address = "0.0.0.0"
+# TEST ONLY - do not use in production; weak/hardcoded credential
 admin_token = "e2e-admin-token"
 
 [core.debug]
+# TEST ONLY - do not use in production; enables debug RPC
 insecure_enable_debug_rpc = true
 insecure_skip_attestation = false
 port = 9015

dstack/gateway/test-run/e2e/configs/gateway-2.toml

@@ -19,9 +19,11 @@ rpc_domain = "gateway-2"
 enabled = true
 port = 9016
 address = "0.0.0.0"
+# TEST ONLY - do not use in production; weak/hardcoded credential
 admin_token = "e2e-admin-token"
 
 [core.debug]
+# TEST ONLY - do not use in production; enables debug RPC
 insecure_enable_debug_rpc = true
 insecure_skip_attestation = false
 port = 9015

dstack/gateway/test-run/e2e/configs/gateway-3.toml

@@ -19,9 +19,11 @@ rpc_domain = "gateway-3"
 enabled = true
 port = 9016
 address = "0.0.0.0"
+# TEST ONLY - do not use in production; weak/hardcoded credential
 admin_token = "e2e-admin-token"
 
 [core.debug]
+# TEST ONLY - do not use in production; enables debug RPC
 insecure_enable_debug_rpc = true
 insecure_skip_attestation = false
 port = 9015

dstack/gateway/test-run/test_suite.sh

@@ -100,6 +100,7 @@ address = "127.0.0.1:${debug_port}"
 [core.admin]
 enabled = true
 address = "127.0.0.1:${admin_port}"
+# TEST ONLY - do not use in production; disables admin API authentication
 insecure_no_auth = true
 
 [core.sync]

dstack/test-scripts/snp-e2e-smoke.sh

@@ -367,6 +367,7 @@ mandatory = false
 
 [core]
 cert_dir = "/dstack/kms-certs"
+# TEST ONLY - do not use in production; weak/hardcoded credential
 admin_token_hash = "00"
 pccs_url = ""
 enforce_self_authorization = true