mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-07 01:36:41 +00:00
* update notReadOnlyRootFilesystem check * remove run as user * add pod level testing to notreadonlyrootFileSystem and update schema_test.go file Co-authored-by: Robert Brennan <accounts@rbren.io>
82 lines
2.0 KiB
Go
82 lines
2.0 KiB
Go
package test
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"path/filepath"
|
|
"runtime"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
"github.com/fairwindsops/polaris/pkg/config"
|
|
"github.com/fairwindsops/polaris/pkg/kube"
|
|
"github.com/fairwindsops/polaris/pkg/validator"
|
|
)
|
|
|
|
var testCases = []testCase{}
|
|
|
|
type testCase struct {
|
|
check string
|
|
filename string
|
|
resources *kube.ResourceProvider
|
|
failure bool
|
|
}
|
|
|
|
func init() {
|
|
_, baseDir, _, _ := runtime.Caller(0)
|
|
baseDir = filepath.Dir(baseDir) + "/checks"
|
|
dirs, err := ioutil.ReadDir(baseDir)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
for _, dir := range dirs {
|
|
check := dir.Name()
|
|
checkDir := baseDir + "/" + check
|
|
cases, err := ioutil.ReadDir(checkDir)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
for _, tc := range cases {
|
|
resources, err := kube.CreateResourceProviderFromPath(checkDir + "/" + tc.Name())
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
testCases = append(testCases, testCase{
|
|
filename: tc.Name(),
|
|
check: check,
|
|
resources: resources,
|
|
failure: strings.Contains(tc.Name(), "failure"),
|
|
})
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestChecks(t *testing.T) {
|
|
for _, tc := range testCases {
|
|
c, err := config.Parse([]byte("checks:\n " + tc.check + ": danger"))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
results, err := validator.ApplyAllSchemaChecksToResourceProvider(&c, tc.resources)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
auditData := validator.AuditData{Results: results}
|
|
summary := auditData.GetSummary()
|
|
total := summary.Successes + summary.Dangers
|
|
msg := fmt.Sprintf("Check %s ran %d times instead of 1", tc.check, total)
|
|
if assert.LessOrEqual(t, uint(1), total, msg) {
|
|
if tc.failure {
|
|
message := "Check " + tc.check + " passed unexpectedly for " + tc.filename
|
|
assert.LessOrEqual(t, uint(1), summary.Dangers, message)
|
|
} else {
|
|
message := "Check " + tc.check + " failed unexpectedly for " + tc.filename
|
|
assert.LessOrEqual(t, uint(1), summary.Successes, message)
|
|
assert.Equal(t, uint(0), summary.Dangers, message)
|
|
}
|
|
}
|
|
}
|
|
}
|