133 lines
3.9 KiB
Go
133 lines
3.9 KiB
Go
//
|
|
// Copyright (c) 2021 Red Hat, Inc.
|
|
// This program and the accompanying materials are made
|
|
// available under the terms of the Eclipse Public License 2.0
|
|
// which is available at https://www.eclipse.org/legal/epl-2.0/
|
|
//
|
|
// SPDX-License-Identifier: EPL-2.0
|
|
//
|
|
// Contributors:
|
|
// Red Hat, Inc. - initial API and implementation
|
|
//
|
|
package deploy
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
orgv1 "github.com/eclipse-che/che-operator/api/v1"
|
|
"github.com/eclipse-che/che-operator/pkg/util"
|
|
rbacv1 "k8s.io/api/rbac/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
"k8s.io/client-go/kubernetes/scheme"
|
|
"sigs.k8s.io/controller-runtime/pkg/client/fake"
|
|
|
|
"testing"
|
|
)
|
|
|
|
func TestSyncClusterRoleBindingToCluster(t *testing.T) {
|
|
orgv1.SchemeBuilder.AddToScheme(scheme.Scheme)
|
|
rbacv1.SchemeBuilder.AddToScheme(scheme.Scheme)
|
|
cli := fake.NewFakeClientWithScheme(scheme.Scheme)
|
|
deployContext := &DeployContext{
|
|
CheCluster: &orgv1.CheCluster{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Namespace: "eclipse-che",
|
|
},
|
|
},
|
|
ClusterAPI: ClusterAPI{
|
|
Client: cli,
|
|
NonCachedClient: cli,
|
|
Scheme: scheme.Scheme,
|
|
},
|
|
}
|
|
|
|
done, err := SyncClusterRoleBindingToCluster(deployContext, "test", "sa", "clusterrole-1")
|
|
if !done || err != nil {
|
|
t.Fatalf("Failed to sync crb: %v", err)
|
|
}
|
|
|
|
// sync a new cluster role binding
|
|
_, err = SyncClusterRoleBindingToCluster(deployContext, "test", "sa", "clusterrole-2")
|
|
if err != nil {
|
|
t.Fatalf("Failed to sync crb: %v", err)
|
|
}
|
|
|
|
// sync twice to be sure update done correctly
|
|
done, err = SyncClusterRoleBindingToCluster(deployContext, "test", "sa", "clusterrole-2")
|
|
if !done || err != nil {
|
|
t.Fatalf("Failed to sync crb: %v", err)
|
|
}
|
|
|
|
actual := &rbacv1.ClusterRoleBinding{}
|
|
err = cli.Get(context.TODO(), types.NamespacedName{Name: "test"}, actual)
|
|
if err != nil {
|
|
t.Fatalf("Failed to get crb: %v", err)
|
|
}
|
|
|
|
if actual.RoleRef.Name != "clusterrole-2" {
|
|
t.Fatalf("Failed to sync crb: %v", err)
|
|
}
|
|
}
|
|
|
|
func TestSyncClusterRoleBindingAndAddFinalizerToCluster(t *testing.T) {
|
|
orgv1.SchemeBuilder.AddToScheme(scheme.Scheme)
|
|
rbacv1.SchemeBuilder.AddToScheme(scheme.Scheme)
|
|
cli := fake.NewFakeClientWithScheme(scheme.Scheme)
|
|
deployContext := &DeployContext{
|
|
CheCluster: &orgv1.CheCluster{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Namespace: "eclipse-che",
|
|
Name: "eclipse-che",
|
|
},
|
|
},
|
|
ClusterAPI: ClusterAPI{
|
|
Client: cli,
|
|
NonCachedClient: cli,
|
|
Scheme: scheme.Scheme,
|
|
},
|
|
}
|
|
cli.Create(context.TODO(), deployContext.CheCluster)
|
|
|
|
done, err := SyncClusterRoleBindingAndAddFinalizerToCluster(deployContext, "test", "sa", "clusterrole-1")
|
|
if !done || err != nil {
|
|
t.Fatalf("Failed to sync crb: %v", err)
|
|
}
|
|
|
|
if !util.ContainsString(deployContext.CheCluster.Finalizers, "test.crb.finalizers.che.eclipse.org") {
|
|
t.Fatalf("Failed to add finalizer")
|
|
}
|
|
|
|
// don't expect any deletion
|
|
err = ReconcileClusterRoleBindingFinalizer(deployContext, "test")
|
|
if err != nil {
|
|
t.Fatalf("Failed to reconcile finalizer: %v", err)
|
|
}
|
|
|
|
actual := &rbacv1.ClusterRoleBinding{}
|
|
err = cli.Get(context.TODO(), types.NamespacedName{Name: "test"}, actual)
|
|
if err != nil {
|
|
t.Fatalf("CRD shouldn't be deleted: %v", err)
|
|
}
|
|
if !util.ContainsString(deployContext.CheCluster.Finalizers, "test.crb.finalizers.che.eclipse.org") {
|
|
t.Fatalf("Finalizer shouldn't be deleted")
|
|
}
|
|
|
|
// crb must be deleted as well as finalizer
|
|
deployContext.CheCluster.ObjectMeta.DeletionTimestamp = &metav1.Time{Time: time.Now()}
|
|
err = ReconcileClusterRoleBindingFinalizer(deployContext, "test")
|
|
if err != nil {
|
|
t.Fatalf("Failed to reconcile finalizer: %v", err)
|
|
}
|
|
|
|
actual = &rbacv1.ClusterRoleBinding{}
|
|
err = cli.Get(context.TODO(), types.NamespacedName{Name: "test"}, actual)
|
|
if err == nil {
|
|
t.Fatalf("Failed to remove crb: %v", err)
|
|
}
|
|
if util.ContainsString(deployContext.CheCluster.Finalizers, "test.crb.finalizers.che.eclipse.org") {
|
|
t.Fatalf("Failed to remove finalizer")
|
|
}
|
|
}
|