kubescape/scapepkg/exceptions/exceptionprocessor_test.go

package exceptions

import (
	"testing"

	"github.com/armosec/kubescape/cautils/armotypes"
)

func PostureExceptionPolicyDisableMock() *armotypes.PostureExceptionPolicy {
	return &armotypes.PostureExceptionPolicy{}
}

func PostureExceptionPolicyAlertOnlyMock() *armotypes.PostureExceptionPolicy {
	return &armotypes.PostureExceptionPolicy{
		PortalBase: armotypes.PortalBase{
			Name: "postureExceptionPolicyAlertOnlyMock",
		},
		PolicyType: "postureExceptionPolicy",
		Actions:    []armotypes.PostureExceptionPolicyActions{armotypes.AlertOnly},
		Resources: []armotypes.PortalDesignator{
			{
				DesignatorType: armotypes.DesignatorAttributes,
				Attributes: map[string]string{
					armotypes.AttributeNamespace: "default",
					armotypes.AttributeCluster:   "unittest",
				},
			},
		},
		PosturePolicies: []armotypes.PosturePolicy{
			{
				FrameworkName: "MITRE",
			},
		},
	}
}

func TestListRuleExceptions(t *testing.T) {
	exceptionPolicies := []armotypes.PostureExceptionPolicy{*PostureExceptionPolicyAlertOnlyMock()}
	res1 := ListRuleExceptions(exceptionPolicies, "MITRE", "", "")
	if len(res1) != 1 {
		t.Errorf("expecting 1 exception")
	}
	res2 := ListRuleExceptions(exceptionPolicies, "", "hostPath mount", "")
	if len(res2) != 0 {
		t.Errorf("expecting 0 exception")
	}
}

// func TestGetException(t *testing.T) {
// 	exceptionPolicies := []armotypes.PostureExceptionPolicy{*PostureExceptionPolicyAlertOnlyMock()}
// 	res1 := ListRuleExceptions(exceptionPolicies, "MITRE", "", "")
// 	if len(res1) != 1 {
// 		t.Errorf("expecting 1 exception")
// 	}
// 	res2 := ListRuleExceptions(exceptionPolicies, "", "hostPath mount", "")
// 	if len(res2) != 0 {
// 		t.Errorf("expecting 0 exception")
// 	}
// }