mirror of
https://github.com/fluxcd/flagger.git
synced 2026-04-15 06:57:34 +00:00
290 lines
14 KiB
Go
290 lines
14 KiB
Go
package canary
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
)
|
|
|
|
func TestConfigIsDisabled(t *testing.T) {
|
|
for _, c := range []struct {
|
|
annotations map[string]string
|
|
exp bool
|
|
}{
|
|
{annotations: map[string]string{configTrackingDisabledAnnotationKey: "disable"}, exp: true},
|
|
{annotations: map[string]string{"app": "disable"}, exp: false},
|
|
{annotations: map[string]string{}, exp: false},
|
|
} {
|
|
assert.Equal(t, configIsDisabled(c.annotations), c.exp)
|
|
}
|
|
}
|
|
|
|
func TestConfigTracker_ConfigMaps(t *testing.T) {
|
|
t.Run("deployment", func(t *testing.T) {
|
|
dc := deploymentConfigs{name: "podinfo", label: "name", labelValue: "podinfo"}
|
|
mocks := newDeploymentFixture(dc)
|
|
configMap := newDeploymentControllerTestConfigMap()
|
|
configMapProjected := newDeploymentControllerTestConfigProjected()
|
|
|
|
mocks.initializeCanary(t)
|
|
|
|
depPrimary, err := mocks.kubeClient.AppsV1().Deployments("default").Get(context.TODO(), "podinfo-primary", metav1.GetOptions{})
|
|
require.NoError(t, err)
|
|
|
|
configPrimaryVolName := depPrimary.Spec.Template.Spec.Volumes[0].VolumeSource.ConfigMap.LocalObjectReference.Name
|
|
assert.Equal(t, "podinfo-config-vol-primary", configPrimaryVolName)
|
|
|
|
configPrimary, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimary.Data["color"])
|
|
}
|
|
|
|
configPrimaryEnv, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-all-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimaryEnv.Data["color"])
|
|
}
|
|
|
|
configPrimaryVol, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimaryVol.Data["color"])
|
|
}
|
|
|
|
configProjectedName := depPrimary.Spec.Template.Spec.Volumes[2].VolumeSource.Projected.Sources[0].ConfigMap.Name
|
|
assert.Equal(t, "podinfo-config-projected-primary", configProjectedName)
|
|
|
|
configPrimaryProjected, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMapProjected.Data["color"], configPrimaryProjected.Data["color"])
|
|
}
|
|
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-enabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-enabled-primary", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-disabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-disabled-primary", metav1.GetOptions{})
|
|
assert.Error(t, err)
|
|
|
|
var trackedVolPresent, originalVolPresent bool
|
|
for _, vol := range depPrimary.Spec.Template.Spec.Volumes {
|
|
if vol.ConfigMap != nil {
|
|
switch vol.ConfigMap.Name {
|
|
case "podinfo-config-tracker-enabled":
|
|
assert.Fail(t, "primary Deployment does not contain a volume for config-tracked configmap %q", vol.ConfigMap.Name)
|
|
case "podinfo-config-tracker-enabled-primary":
|
|
trackedVolPresent = true
|
|
case "podinfo-config-tracker-disabled":
|
|
originalVolPresent = true
|
|
case "podinfo-config-tracker-disabled-primary":
|
|
assert.Fail(t, "primary Deployment incorrectly contains a volume for a copy of an untracked configmap %q", vol.ConfigMap.Name)
|
|
}
|
|
}
|
|
}
|
|
assert.True(t, trackedVolPresent, "Volume for primary copy of config-tracked configmap should be present")
|
|
assert.True(t, originalVolPresent, "Volume for original configmap with disabled tracking should be present")
|
|
})
|
|
|
|
t.Run("daemonset", func(t *testing.T) {
|
|
dc := daemonsetConfigs{name: "podinfo", label: "name", labelValue: "podinfo"}
|
|
mocks := newDaemonSetFixture(dc)
|
|
configMap := newDaemonSetControllerTestConfigMap()
|
|
configMapProjected := newDaemonSetControllerTestConfigProjected()
|
|
|
|
err := mocks.controller.Initialize(mocks.canary)
|
|
require.NoError(t, err)
|
|
|
|
daePrimary, err := mocks.kubeClient.AppsV1().DaemonSets("default").Get(context.TODO(), "podinfo-primary", metav1.GetOptions{})
|
|
require.NoError(t, err)
|
|
|
|
configPrimaryVolName := daePrimary.Spec.Template.Spec.Volumes[0].VolumeSource.ConfigMap.LocalObjectReference.Name
|
|
assert.Equal(t, "podinfo-config-vol-primary", configPrimaryVolName)
|
|
|
|
configPrimary, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimary.Data["color"])
|
|
}
|
|
|
|
configPrimaryEnv, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-all-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimaryEnv.Data["color"])
|
|
}
|
|
|
|
configPrimaryVol, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMap.Data["color"], configPrimaryVol.Data["color"])
|
|
}
|
|
|
|
configProjectedName := daePrimary.Spec.Template.Spec.Volumes[2].VolumeSource.Projected.Sources[0].ConfigMap.Name
|
|
assert.Equal(t, "podinfo-config-projected-primary", configProjectedName)
|
|
|
|
configPrimaryProjected, err := mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, configMapProjected.Data["color"], configPrimaryProjected.Data["color"])
|
|
}
|
|
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-enabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-enabled-primary", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-disabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().ConfigMaps("default").Get(context.TODO(), "podinfo-config-tracker-disabled-primary", metav1.GetOptions{})
|
|
assert.Error(t, err)
|
|
|
|
var trackedVolPresent, originalVolPresent bool
|
|
for _, vol := range daePrimary.Spec.Template.Spec.Volumes {
|
|
if vol.ConfigMap != nil {
|
|
switch vol.ConfigMap.Name {
|
|
case "podinfo-config-tracker-enabled":
|
|
assert.Fail(t, "primary Deployment does not contain a volume for config-tracked configmap %q", vol.ConfigMap.Name)
|
|
case "podinfo-config-tracker-enabled-primary":
|
|
trackedVolPresent = true
|
|
case "podinfo-config-tracker-disabled":
|
|
originalVolPresent = true
|
|
case "podinfo-config-tracker-disabled-primary":
|
|
assert.Fail(t, "primary Deployment incorrectly contains a volume for a copy of an untracked configmap %q", vol.ConfigMap.Name)
|
|
}
|
|
}
|
|
}
|
|
assert.True(t, trackedVolPresent, "Volume for primary copy of config-tracked configmap should be present")
|
|
assert.True(t, originalVolPresent, "Volume for original configmap with disabled tracking should be present")
|
|
})
|
|
}
|
|
|
|
func TestConfigTracker_Secrets(t *testing.T) {
|
|
t.Run("deployment", func(t *testing.T) {
|
|
dc := deploymentConfigs{name: "podinfo", label: "name", labelValue: "podinfo"}
|
|
mocks := newDeploymentFixture(dc)
|
|
secret := newDeploymentControllerTestSecret()
|
|
secretProjected := newDeploymentControllerTestSecretProjected()
|
|
|
|
mocks.initializeCanary(t)
|
|
|
|
depPrimary, err := mocks.kubeClient.AppsV1().Deployments("default").Get(context.TODO(), "podinfo-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, "podinfo-secret-vol-primary",
|
|
depPrimary.Spec.Template.Spec.Volumes[1].VolumeSource.Secret.SecretName)
|
|
}
|
|
|
|
secretPrimary, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimary.Data["apiKey"]))
|
|
}
|
|
|
|
secretPrimaryEnv, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-all-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimaryEnv.Data["apiKey"]))
|
|
}
|
|
|
|
secretPrimaryVol, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimaryVol.Data["apiKey"]))
|
|
}
|
|
|
|
secretProjectedName := depPrimary.Spec.Template.Spec.Volumes[2].VolumeSource.Projected.Sources[1].Secret.Name
|
|
assert.Equal(t, "podinfo-secret-projected-primary", secretProjectedName)
|
|
|
|
secretPrimaryProjected, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-projected-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secretProjected.Data["apiKey"]), string(secretPrimaryProjected.Data["apiKey"]))
|
|
}
|
|
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-enabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-enabled-primary", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-disabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-disabled-primary", metav1.GetOptions{})
|
|
assert.Error(t, err)
|
|
|
|
var trackedVolPresent, originalVolPresent bool
|
|
for _, vol := range depPrimary.Spec.Template.Spec.Volumes {
|
|
if vol.Secret != nil {
|
|
switch vol.Secret.SecretName {
|
|
case "podinfo-secret-tracker-enabled":
|
|
assert.Fail(t, "primary Deployment does not contain a volume for config-tracked secret %q", vol.Secret.SecretName)
|
|
case "podinfo-secret-tracker-enabled-primary":
|
|
trackedVolPresent = true
|
|
case "podinfo-secret-tracker-disabled":
|
|
originalVolPresent = true
|
|
case "podinfo-secret-tracker-disabled-primary":
|
|
assert.Fail(t, "primary Deployment incorrectly contains a volume for a copy of an untracked secret %q", vol.Secret.SecretName)
|
|
}
|
|
}
|
|
}
|
|
assert.True(t, trackedVolPresent, "Volume for primary copy of config-tracked secret should be present")
|
|
assert.True(t, originalVolPresent, "Volume for original secret with disabled tracking should be present")
|
|
})
|
|
|
|
t.Run("daemonset", func(t *testing.T) {
|
|
dc := daemonsetConfigs{name: "podinfo", label: "name", labelValue: "podinfo"}
|
|
mocks := newDaemonSetFixture(dc)
|
|
secret := newDaemonSetControllerTestSecret()
|
|
secretProjected := newDaemonSetControllerTestSecretProjected()
|
|
|
|
mocks.controller.Initialize(mocks.canary)
|
|
|
|
daePrimary, err := mocks.kubeClient.AppsV1().DaemonSets("default").Get(context.TODO(), "podinfo-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, "podinfo-secret-vol-primary",
|
|
daePrimary.Spec.Template.Spec.Volumes[1].VolumeSource.Secret.SecretName)
|
|
}
|
|
|
|
secretPrimary, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimary.Data["apiKey"]))
|
|
}
|
|
|
|
secretPrimaryEnv, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-all-env-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimaryEnv.Data["apiKey"]))
|
|
}
|
|
|
|
secretPrimaryVol, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-vol-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secret.Data["apiKey"]), string(secretPrimaryVol.Data["apiKey"]))
|
|
}
|
|
|
|
secretProjectedName := daePrimary.Spec.Template.Spec.Volumes[2].VolumeSource.Projected.Sources[1].Secret.Name
|
|
assert.Equal(t, "podinfo-secret-projected-primary", secretProjectedName)
|
|
|
|
secretPrimaryProjected, err := mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-projected-primary", metav1.GetOptions{})
|
|
if assert.NoError(t, err) {
|
|
assert.Equal(t, string(secretProjected.Data["apiKey"]), string(secretPrimaryProjected.Data["apiKey"]))
|
|
}
|
|
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-enabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-enabled-primary", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-disabled", metav1.GetOptions{})
|
|
assert.NoError(t, err)
|
|
_, err = mocks.kubeClient.CoreV1().Secrets("default").Get(context.TODO(), "podinfo-secret-tracker-disabled-primary", metav1.GetOptions{})
|
|
assert.Error(t, err)
|
|
|
|
var trackedVolPresent, originalVolPresent bool
|
|
for _, vol := range daePrimary.Spec.Template.Spec.Volumes {
|
|
if vol.Secret != nil {
|
|
switch vol.Secret.SecretName {
|
|
case "podinfo-secret-tracker-enabled":
|
|
assert.Fail(t, "primary Deployment does not contain a volume for config-tracked secret %q", vol.Secret.SecretName)
|
|
case "podinfo-secret-tracker-enabled-primary":
|
|
trackedVolPresent = true
|
|
case "podinfo-secret-tracker-disabled":
|
|
originalVolPresent = true
|
|
case "podinfo-secret-tracker-disabled-primary":
|
|
assert.Fail(t, "primary Deployment incorrectly contains a volume for a copy of an untracked secret %q", vol.Secret.SecretName)
|
|
}
|
|
}
|
|
}
|
|
assert.True(t, trackedVolPresent, "Volume for primary copy of config-tracked secret should be present")
|
|
assert.True(t, originalVolPresent, "Volume for original secret with disabled tracking should be present")
|
|
})
|
|
}
|