mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
13caaed8b7
* add image verification * inline policy list Signed-off-by: Jim Bugwadia <jim@nirmata.com> * cosign version and dependencies updates Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add registry initialization Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add build tag to exclude k8schain for cloud providers Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add build tag to exclude k8schain for cloud providers Signed-off-by: Jim Bugwadia <jim@nirmata.com> * generate deep copy and other fixtures Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix deep copy issues Signed-off-by: Jim Bugwadia <jim@nirmata.com> * mutate images to add digest Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add certificates to Kyverno container for HTTPS lookups Signed-off-by: Jim Bugwadia <jim@nirmata.com> * align flag syntax Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update docs Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update dependencies Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update dependencies Signed-off-by: Jim Bugwadia <jim@nirmata.com> * patch image with digest and fix checks Signed-off-by: Jim Bugwadia <jim@nirmata.com> * hardcode image for demos Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add default registry (docker.io) before calling reference.Parse Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix definition Signed-off-by: Jim Bugwadia <jim@nirmata.com> * increase webhook timeout Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix args Signed-off-by: Jim Bugwadia <jim@nirmata.com> * run gofmt Signed-off-by: Jim Bugwadia <jim@nirmata.com> * rename for clarity Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix HasImageVerify check Signed-off-by: Jim Bugwadia <jim@nirmata.com> * align make test commands Signed-off-by: Jim Bugwadia <jim@nirmata.com> * align make test commands Signed-off-by: Jim Bugwadia <jim@nirmata.com> * align make test commands Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix linter error Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * handle API conflict and retry Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix reviewdog issues Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix make for unit tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * improve error message Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix durations Signed-off-by: Jim Bugwadia <jim@nirmata.com> * handle errors in tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * print policy name Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add retries and duration to error log Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix time check in tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * round creation times in test Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix retry loop Signed-off-by: Jim Bugwadia <jim@nirmata.com> * remove timing check for policy creation Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix e2e error - policy not found Signed-off-by: Shuting Zhao <shutting06@gmail.com> * update string comparison method Signed-off-by: Shuting Zhao <shutting06@gmail.com> * fix test Generate_Namespace_Label_Actions Signed-off-by: Shuting Zhao <shutting06@gmail.com> * add debug info for e2e tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix error Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix generate bug Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add check for update operations Signed-off-by: Jim Bugwadia <jim@nirmata.com> * increase time for deleteing a resource Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix check Signed-off-by: Jim Bugwadia <jim@nirmata.com> Co-authored-by: Shuting Zhao <shutting06@gmail.com>
195 lines
7.1 KiB
Go
195 lines
7.1 KiB
Go
package e2e
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"os"
|
|
"time"
|
|
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/client-go/dynamic"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
"sigs.k8s.io/yaml"
|
|
)
|
|
|
|
// E2EClient ...
|
|
type E2EClient struct {
|
|
Client dynamic.Interface
|
|
}
|
|
|
|
type APIRequest struct {
|
|
URL string
|
|
Type string
|
|
Body io.Reader
|
|
}
|
|
|
|
// NewE2EClient returns a new instance of E2EClient
|
|
func NewE2EClient() (*E2EClient, error) {
|
|
kubeconfig := os.Getenv("KUBECONFIG")
|
|
if kubeconfig == "" {
|
|
kubeconfig = os.Getenv("HOME") + "/.kube/config"
|
|
}
|
|
config, err := clientcmd.BuildConfigFromFlags("", kubeconfig)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
e2eClient := new(E2EClient)
|
|
dClient, err := dynamic.NewForConfig(config)
|
|
e2eClient.Client = dClient
|
|
return e2eClient, err
|
|
}
|
|
|
|
// GetGVR :- gets GroupVersionResource for dynamic client
|
|
func GetGVR(group, version, resource string) schema.GroupVersionResource {
|
|
return schema.GroupVersionResource{Group: group, Version: version, Resource: resource}
|
|
}
|
|
|
|
// CleanClusterPolicies ;- Deletes all the cluster policies
|
|
func (e2e *E2EClient) CleanClusterPolicies(gvr schema.GroupVersionResource) error {
|
|
namespace := ""
|
|
res, err := e2e.ListNamespacedResources(gvr, namespace)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, r := range res.Items {
|
|
err = e2e.DeleteNamespacedResource(gvr, namespace, r.GetName())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// GetNamespacedResource ...
|
|
func (e2e *E2EClient) GetNamespacedResource(gvr schema.GroupVersionResource, namespace, name string) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Namespace(namespace).Get(context.TODO(), name, metav1.GetOptions{})
|
|
}
|
|
|
|
// GetClusteredResource ...
|
|
func (e2e *E2EClient) GetClusteredResource(gvr schema.GroupVersionResource, name string) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Get(context.TODO(), name, metav1.GetOptions{})
|
|
}
|
|
|
|
// GetWithRetry :- Retry Operation till the end of retry or until it is Passed, retryCount is the Wait duration after each retry,
|
|
func GetWithRetry(sleepInterval time.Duration, retryCount int, retryFunc func() error) error {
|
|
var err error
|
|
for i := 0; i < retryCount; i++ {
|
|
err = retryFunc()
|
|
if err == nil {
|
|
return nil
|
|
}
|
|
|
|
time.Sleep(sleepInterval)
|
|
}
|
|
|
|
return fmt.Errorf("operation failed, retries=%v, duration=%v: %v", retryCount, sleepInterval, err)
|
|
}
|
|
|
|
// DeleteNamespacedResource ...
|
|
func (e2e *E2EClient) DeleteNamespacedResource(gvr schema.GroupVersionResource, namespace, name string) error {
|
|
return e2e.Client.Resource(gvr).Namespace(namespace).Delete(context.TODO(), name, metav1.DeleteOptions{})
|
|
}
|
|
|
|
// DeleteClusteredResource ...
|
|
func (e2e *E2EClient) DeleteClusteredResource(gvr schema.GroupVersionResource, name string) error {
|
|
return e2e.Client.Resource(gvr).Delete(context.TODO(), name, metav1.DeleteOptions{})
|
|
}
|
|
|
|
// CreateNamespacedResource ...
|
|
func (e2e *E2EClient) CreateNamespacedResource(gvr schema.GroupVersionResource, namespace string, resourceData *unstructured.Unstructured) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Namespace(namespace).Create(context.TODO(), resourceData, metav1.CreateOptions{})
|
|
}
|
|
|
|
// CreateClusteredResource ...
|
|
func (e2e *E2EClient) CreateClusteredResource(gvr schema.GroupVersionResource, resourceData *unstructured.Unstructured) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Create(context.TODO(), resourceData, metav1.CreateOptions{})
|
|
}
|
|
|
|
// ListNamespacedResources ...
|
|
func (e2e *E2EClient) ListNamespacedResources(gvr schema.GroupVersionResource, namespace string) (*unstructured.UnstructuredList, error) {
|
|
return e2e.Client.Resource(gvr).Namespace(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
}
|
|
|
|
// CreateNamespacedResourceYaml creates namespaced resources like Pods, Services, Deployments etc
|
|
func (e2e *E2EClient) CreateNamespacedResourceYaml(gvr schema.GroupVersionResource, namespace string, resourceData []byte) (*unstructured.Unstructured, error) {
|
|
resource := unstructured.Unstructured{}
|
|
err := yaml.Unmarshal(resourceData, &resource)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
result, err := e2e.Client.Resource(gvr).Namespace(namespace).Create(context.TODO(), &resource, metav1.CreateOptions{})
|
|
return result, err
|
|
}
|
|
|
|
// CreateClusteredResourceYaml creates cluster resources from YAML like Namespace, ClusterRole, ClusterRoleBinding etc ...
|
|
func (e2e *E2EClient) CreateClusteredResourceYaml(gvr schema.GroupVersionResource, resourceData []byte) (*unstructured.Unstructured, error) {
|
|
resource := unstructured.Unstructured{}
|
|
err := yaml.Unmarshal(resourceData, &resource)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
result, err := e2e.CreateClusteredResource(gvr, &resource)
|
|
return result, err
|
|
}
|
|
|
|
// UpdateClusteredResource ...
|
|
func (e2e *E2EClient) UpdateClusteredResource(gvr schema.GroupVersionResource, resourceData *unstructured.Unstructured) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Update(context.TODO(), resourceData, metav1.UpdateOptions{})
|
|
}
|
|
|
|
// UpdateClusteredResourceYaml creates cluster resources from YAML like Namespace, ClusterRole, ClusterRoleBinding etc ...
|
|
func (e2e *E2EClient) UpdateClusteredResourceYaml(gvr schema.GroupVersionResource, resourceData []byte) (*unstructured.Unstructured, error) {
|
|
resource := unstructured.Unstructured{}
|
|
err := yaml.Unmarshal(resourceData, &resource)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
result, err := e2e.UpdateClusteredResource(gvr, &resource)
|
|
return result, err
|
|
}
|
|
|
|
// UpdateNamespacedResourceYaml creates namespaced resources like Pods, Services, Deployments etc
|
|
func (e2e *E2EClient) UpdateNamespacedResourceYaml(gvr schema.GroupVersionResource, namespace string, resourceData []byte) (*unstructured.Unstructured, error) {
|
|
resource := unstructured.Unstructured{}
|
|
err := yaml.Unmarshal(resourceData, &resource)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
result, err := e2e.Client.Resource(gvr).Namespace(namespace).Update(context.TODO(), &resource, metav1.UpdateOptions{})
|
|
return result, err
|
|
}
|
|
|
|
// UpdateNamespacedResource ...
|
|
func (e2e *E2EClient) UpdateNamespacedResource(gvr schema.GroupVersionResource, namespace string, resourceData *unstructured.Unstructured) (*unstructured.Unstructured, error) {
|
|
return e2e.Client.Resource(gvr).Namespace(namespace).Update(context.TODO(), resourceData, metav1.UpdateOptions{})
|
|
}
|
|
|
|
func CallAPI(request APIRequest) (*http.Response, error) {
|
|
var response *http.Response
|
|
switch request.Type {
|
|
case "GET":
|
|
resp, err := http.Get(request.URL)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error occurred while calling %s: %w", request.URL, err)
|
|
}
|
|
response = resp
|
|
case "POST", "PUT", "DELETE", "PATCH":
|
|
req, err := http.NewRequest(string(request.Type), request.URL, request.Body)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error occurred while calling %s: %w", request.URL, err)
|
|
}
|
|
resp, err := http.DefaultClient.Do(req)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error occurred while calling %s: %w", request.URL, err)
|
|
}
|
|
response = resp
|
|
default:
|
|
return nil, fmt.Errorf("error occurred while calling %s: wrong request type found", request.URL)
|
|
}
|
|
|
|
return response, nil
|
|
}
|