github/capsule
1
0
Fork 0
mirror of https://github.com/projectcapsule/capsule.git synced 2026-08-19 12:36:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(e2e): ImagePullPolicy for v1alpha using annotations

Browse Source
This commit is contained in:
Dario Tranchitella
2021-06-14 10:53:55 +02:00
parent b6f3fccbea
commit 006b0c80cf
2 changed files with 244 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
e2e/imagepullpolicy_multiple_test.go
+122
View File
@@ -0,0 +1,122 @@
//+build e2e
// Copyright 2020-2021 Clastix Labs
// SPDX-License-Identifier: Apache-2.0
package e2e
import (
"context"
. "github.com/onsi/ginkgo"
. "github.com/onsi/gomega"
corev1 "k8s.io/api/core/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"github.com/clastix/capsule/api/v1alpha1"
)
var _ = Describe("enforcing some defined ImagePullPolicy", func() {
tnt := &v1alpha1.Tenant{
ObjectMeta: metav1.ObjectMeta{
Name: "image-pull-policies",
Annotations: map[string]string{
"capsule.clastix.io/allowed-image-pull-policy": "Always,IfNotPresent",
},
},
Spec: v1alpha1.TenantSpec{
Owner: v1alpha1.OwnerSpec{
Name: "alex",
Kind: "User",
},
},
}
JustBeforeEach(func() {
EventuallyCreation(func() error {
tnt.ResourceVersion = ""
return k8sClient.Create(context.TODO(), tnt)
}).Should(Succeed())
})
JustAfterEach(func() {
Expect(k8sClient.Delete(context.TODO(), tnt)).Should(Succeed())
})
It("should just allow the defined policies", func() {
ns := NewNamespace("allow-policy")
NamespaceCreation(ns, tnt, defaultTimeoutInterval).Should(Succeed())
cs := ownerClient(tnt)
By("allowing Always", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "pull-always",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullAlways,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).Should(Succeed())
})
By("allowing IfNotPresent", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "if-not-present",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullIfNotPresent,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).Should(Succeed())
})
By("blocking Never", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "never",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullNever,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).ShouldNot(Succeed())
})
})
})
e2e/imagepullpolicy_single_test.go
+122
View File
@@ -0,0 +1,122 @@
//+build e2e
// Copyright 2020-2021 Clastix Labs
// SPDX-License-Identifier: Apache-2.0
package e2e
import (
"context"
. "github.com/onsi/ginkgo"
. "github.com/onsi/gomega"
corev1 "k8s.io/api/core/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"github.com/clastix/capsule/api/v1alpha1"
)
var _ = Describe("enforcing a defined ImagePullPolicy", func() {
tnt := &v1alpha1.Tenant{
ObjectMeta: metav1.ObjectMeta{
Name: "image-pull-policy",
Annotations: map[string]string{
"capsule.clastix.io/allowed-image-pull-policy": "Always",
},
},
Spec: v1alpha1.TenantSpec{
Owner: v1alpha1.OwnerSpec{
Name: "axel",
Kind: "User",
},
},
}
JustBeforeEach(func() {
EventuallyCreation(func() error {
tnt.ResourceVersion = ""
return k8sClient.Create(context.TODO(), tnt)
}).Should(Succeed())
})
JustAfterEach(func() {
Expect(k8sClient.Delete(context.TODO(), tnt)).Should(Succeed())
})
It("should just allow the defined policy", func() {
ns := NewNamespace("allow-policies")
NamespaceCreation(ns, tnt, defaultTimeoutInterval).Should(Succeed())
cs := ownerClient(tnt)
By("allowing Always", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "pull-always",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullAlways,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).Should(Succeed())
})
By("blocking IfNotPresent", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "if-not-present",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullIfNotPresent,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).ShouldNot(Succeed())
})
By("blocking Never", func() {
pod := &corev1.Pod{
ObjectMeta: metav1.ObjectMeta{
Name: "never",
},
Spec: corev1.PodSpec{
Containers: []corev1.Container{
{
Name: "container",
Image: "gcr.io/google_containers/pause-amd64:3.0",
ImagePullPolicy: corev1.PullNever,
},
},
},
}
EventuallyCreation(func() (err error) {
_, err = cs.CoreV1().Pods(ns.Name).Create(context.Background(), pod, metav1.CreateOptions{})
return
}).ShouldNot(Succeed())
})
})
})