mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
99d988e98c
* feat: add support for subresources to validating and mutating policies Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add CLI test cases with subresources for validating policies Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Fix existing e2e tests for validating policies and remove tests migrated to kuttl Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for validating policies with subresources Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for mutating policies with subresources Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for validating policy by-pass by manipulating preconditions Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
102 lines
3.5 KiB
Go
102 lines
3.5 KiB
Go
package kube
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"gotest.tools/assert"
|
|
)
|
|
|
|
func Test_GetKindFromGVK(t *testing.T) {
|
|
var apiVersion, kind string
|
|
apiVersion, kind = GetKindFromGVK("*")
|
|
assert.Equal(t, "", apiVersion)
|
|
assert.Equal(t, "*", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("Pod")
|
|
assert.Equal(t, "", apiVersion)
|
|
assert.Equal(t, "Pod", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("v1/Pod")
|
|
assert.Equal(t, "v1", apiVersion)
|
|
assert.Equal(t, "Pod", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("batch/*/CronJob")
|
|
assert.Equal(t, "batch/*", apiVersion)
|
|
assert.Equal(t, "CronJob", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("storage.k8s.io/v1/CSIDriver")
|
|
assert.Equal(t, "storage.k8s.io/v1", apiVersion)
|
|
assert.Equal(t, "CSIDriver", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("tekton.dev/v1beta1/TaskRun/Status")
|
|
assert.Equal(t, "tekton.dev/v1beta1", apiVersion)
|
|
assert.Equal(t, "TaskRun/Status", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("v1/Pod.Status")
|
|
assert.Equal(t, "v1", apiVersion)
|
|
assert.Equal(t, "Pod/Status", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("Pod.Status")
|
|
assert.Equal(t, "", apiVersion)
|
|
assert.Equal(t, "Pod/Status", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("apps/v1/Deployment/Scale")
|
|
assert.Equal(t, "apps/v1", apiVersion)
|
|
assert.Equal(t, "Deployment/Scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("v1/ReplicationController/Scale")
|
|
assert.Equal(t, "v1", apiVersion)
|
|
assert.Equal(t, "ReplicationController/Scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("*/ReplicationController/Scale")
|
|
assert.Equal(t, "*", apiVersion)
|
|
assert.Equal(t, "ReplicationController/Scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("*/Deployment/scale")
|
|
assert.Equal(t, "*", apiVersion)
|
|
assert.Equal(t, "Deployment/scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("*/Deployment.scale")
|
|
assert.Equal(t, "*", apiVersion)
|
|
assert.Equal(t, "Deployment/scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("*/Deployment/scale")
|
|
assert.Equal(t, "*", apiVersion)
|
|
assert.Equal(t, "Deployment/scale", kind)
|
|
|
|
apiVersion, kind = GetKindFromGVK("apps/v1/Deployment.scale")
|
|
assert.Equal(t, "apps/v1", apiVersion)
|
|
assert.Equal(t, "Deployment/scale", kind)
|
|
}
|
|
|
|
func Test_SplitSubresource(t *testing.T) {
|
|
var kind, subresource string
|
|
kind, subresource = SplitSubresource("TaskRun/Status")
|
|
assert.Equal(t, kind, "TaskRun")
|
|
assert.Equal(t, subresource, "Status")
|
|
|
|
kind, subresource = SplitSubresource("TaskRun/status")
|
|
assert.Equal(t, kind, "TaskRun")
|
|
assert.Equal(t, subresource, "status")
|
|
}
|
|
|
|
func Test_GroupVersionMatches(t *testing.T) {
|
|
groupVersion, serverResourceGroupVersion := "v1", "v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), true)
|
|
|
|
// If user does not specify a group, then it is considered as legacy group which is empty
|
|
groupVersion, serverResourceGroupVersion = "v1", "networking.k8s.io/v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), false)
|
|
|
|
groupVersion, serverResourceGroupVersion = "*", "v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), true)
|
|
|
|
groupVersion, serverResourceGroupVersion = "certificates.k8s.io/*", "certificates.k8s.io/v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), true)
|
|
|
|
groupVersion, serverResourceGroupVersion = "*", "certificates.k8s.io/v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), true)
|
|
|
|
groupVersion, serverResourceGroupVersion = "certificates.k8s.io/*", "networking.k8s.io/v1"
|
|
assert.Equal(t, GroupVersionMatches(groupVersion, serverResourceGroupVersion), false)
|
|
}
|