mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-08-22 21:56:32 +00:00
5bce1db05e
* Implement namespace support for exceptions Signed-off-by: Markus Blaschke <mblaschke82@gmail.com> * remove debug Signed-off-by: Markus Blaschke <mblaschke82@gmail.com> * Add documentation Signed-off-by: Markus Blaschke <mblaschke82@gmail.com> Co-authored-by: baderbuddy <bader@fairwinds.com>
80 lines
2.8 KiB
Go
80 lines
2.8 KiB
Go
// Copyright 2019 FairwindsOps Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package config
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
var confExemptRuleTest = `
|
|
checks:
|
|
ANY: warning
|
|
OTHER: warning
|
|
exemptions:
|
|
- controllerNames:
|
|
- test
|
|
rules:
|
|
- ANY
|
|
`
|
|
|
|
var confExemptTest = `
|
|
checks:
|
|
ANY: warning
|
|
exemptions:
|
|
- controllerNames:
|
|
- test
|
|
`
|
|
|
|
var confNamespaceTest = `
|
|
checks:
|
|
ANY: warning
|
|
exemptions:
|
|
- namespace: kube-system
|
|
controllerNames:
|
|
- test
|
|
`
|
|
|
|
func TestInclusiveExemption(t *testing.T) {
|
|
parsedConf, _ := Parse([]byte(confExemptTest))
|
|
applicable := parsedConf.IsActionable("ANY", "test", "test")
|
|
applicableOtherController := parsedConf.IsActionable("ANY","test", "other")
|
|
|
|
assert.False(t, applicable, "Expected all checks to be exempted when their controller is specified.")
|
|
assert.True(t, applicableOtherController, "Expected checks to only be exempted when their controller is specified.")
|
|
}
|
|
|
|
func TestIndividualRuleException(t *testing.T) {
|
|
parsedConf, _ := Parse([]byte(confExemptRuleTest))
|
|
applicable := parsedConf.IsActionable("ANY", "test", "test")
|
|
applicableOtherRule := parsedConf.IsActionable("OTHER","test", "test")
|
|
applicableOtherRuleOtherController := parsedConf.IsActionable("OTHER","test", "other")
|
|
applicableRuleOtherController := parsedConf.IsActionable("ANY","test", "other")
|
|
|
|
assert.False(t, applicable, "Expected all checks to be exempted when their controller and rule are specified.")
|
|
assert.True(t, applicableOtherRule, "Expected checks to only be exempted when their controller and rule are specified.")
|
|
assert.True(t, applicableOtherRuleOtherController, "Expected checks to only be exempted when their controller and rule are specified.")
|
|
assert.True(t, applicableRuleOtherController, "Expected checks to only be exempted when their controller and rule are specified.")
|
|
}
|
|
|
|
func TestNamespaceExemption(t *testing.T) {
|
|
parsedConf, _ := Parse([]byte(confNamespaceTest))
|
|
applicable := parsedConf.IsActionable("ANY", "kube-system", "test")
|
|
applicableOtherController := parsedConf.IsActionable("ANY","default", "test")
|
|
|
|
assert.False(t, applicable, "Expected all checks to be exempted when their namespace and controller is specified.")
|
|
assert.True(t, applicableOtherController, "Expected checks to only be exempted when their namespace and controller is specified.")
|
|
} |