mirror of
https://github.com/kubescape/kubescape.git
synced 2026-04-06 10:46:52 +00:00
97 lines
2.7 KiB
Go
97 lines
2.7 KiB
Go
package resourcehandler
|
|
|
|
import (
|
|
"context"
|
|
_ "embed"
|
|
"testing"
|
|
|
|
"github.com/kubescape/k8s-interface/k8sinterface"
|
|
"github.com/kubescape/kubescape/v3/core/cautils"
|
|
"github.com/kubescape/opa-utils/reporthandling/apis"
|
|
helpersv1 "github.com/kubescape/opa-utils/reporthandling/helpers/v1"
|
|
reportv2 "github.com/kubescape/opa-utils/reporthandling/v2"
|
|
"github.com/stretchr/testify/assert"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/client-go/dynamic/fake"
|
|
fakeclientset "k8s.io/client-go/kubernetes/fake"
|
|
"k8s.io/client-go/rest"
|
|
)
|
|
|
|
func Test_getCloudMetadata(t *testing.T) {
|
|
|
|
tests := []struct {
|
|
want apis.ICloudParser
|
|
provider string
|
|
name string
|
|
}{
|
|
{
|
|
name: "Test_getCloudMetadata - GitVersion: GKE",
|
|
provider: "gke",
|
|
want: helpersv1.NewGKEMetadata(""),
|
|
},
|
|
{
|
|
name: "Test_getCloudMetadata_context_EKS",
|
|
provider: "eks",
|
|
want: helpersv1.NewEKSMetadata(""),
|
|
},
|
|
{
|
|
name: "Test_getCloudMetadata_context_AKS",
|
|
provider: "aks",
|
|
want: helpersv1.NewAKSMetadata(""),
|
|
},
|
|
}
|
|
k8sinterface.K8SConfig = &rest.Config{}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
|
|
got := newCloudMetadata(tt.provider)
|
|
if got == nil {
|
|
t.Errorf("getCloudMetadata() = %v, want %v", got, tt.want.Provider())
|
|
return
|
|
}
|
|
if got.Provider() != tt.want.Provider() {
|
|
t.Errorf("getCloudMetadata() = %v, want %v", got, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
// https://github.com/kubescape/kubescape/pull/1004
|
|
// Cluster named .*eks.* config without a cloudconfig panics whereas we just want to scan a file
|
|
func getResourceHandlerMock() *K8sResourceHandler {
|
|
client := fakeclientset.NewClientset()
|
|
fakeDiscovery := client.Discovery()
|
|
|
|
k8s := &k8sinterface.KubernetesApi{
|
|
KubernetesClient: client,
|
|
DynamicClient: fake.NewSimpleDynamicClient(runtime.NewScheme()),
|
|
DiscoveryClient: fakeDiscovery,
|
|
Context: context.Background(),
|
|
}
|
|
|
|
return NewK8sResourceHandler(k8s, nil, nil, "test")
|
|
}
|
|
func Test_CollectResources(t *testing.T) {
|
|
resourceHandler := getResourceHandlerMock()
|
|
objSession := &cautils.OPASessionObj{
|
|
Metadata: &reportv2.Metadata{
|
|
ScanMetadata: reportv2.ScanMetadata{
|
|
ScanningTarget: reportv2.Cluster,
|
|
},
|
|
},
|
|
Report: &reportv2.PostureReport{
|
|
ClusterAPIServerInfo: nil,
|
|
},
|
|
}
|
|
|
|
assert.NotPanics(t, func() {
|
|
CollectResources(context.TODO(), resourceHandler, objSession, &cautils.ScanInfo{})
|
|
}, "Cluster named .*eks.* without a cloud config panics on cluster scan !")
|
|
|
|
assert.NotPanics(t, func() {
|
|
objSession.Metadata.ScanMetadata.ScanningTarget = reportv2.File
|
|
CollectResources(context.TODO(), resourceHandler, objSession, &cautils.ScanInfo{})
|
|
}, "Cluster named .*eks.* without a cloud config panics on non-cluster scan !")
|
|
|
|
}
|