Dan Meier
112 lines
4.9 KiB
Go
112 lines
4.9 KiB
Go
/*
|
|
Copyright 2022 The Flux authors
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package main
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
func TestCreateSourceOCI(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
args string
|
|
assertFunc assertFunc
|
|
}{
|
|
{
|
|
name: "NoArgs",
|
|
args: "create source oci",
|
|
assertFunc: assertError("name is required"),
|
|
},
|
|
{
|
|
name: "NoURL",
|
|
args: "create source oci podinfo",
|
|
assertFunc: assertError("url is required"),
|
|
},
|
|
{
|
|
name: "verify secret specified but provider missing",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-secret-ref=cosign-pub",
|
|
assertFunc: assertError("a verification provider must be specified when a secret is specified"),
|
|
},
|
|
{
|
|
name: "verify issuer specified but provider missing",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-issuer=github.com",
|
|
assertFunc: assertError("a verification provider must be specified when OIDC issuer/subject is specified"),
|
|
},
|
|
{
|
|
name: "verify identity specified but provider missing",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-subject=developer",
|
|
assertFunc: assertError("a verification provider must be specified when OIDC issuer/subject is specified"),
|
|
},
|
|
{
|
|
name: "verify issuer specified but subject missing",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-issuer=github --verify-provider=cosign --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_issuer.golden"),
|
|
},
|
|
{
|
|
name: "all verify fields set",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-issuer=github verify-subject=stefanprodan --verify-provider=cosign --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_issuer.golden"),
|
|
},
|
|
{
|
|
name: "verify subject specified but issuer missing",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --verify-subject=stefanprodan --verify-provider=cosign --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_subject.golden"),
|
|
},
|
|
{
|
|
name: "export manifest",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --interval 10m --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export.golden"),
|
|
},
|
|
{
|
|
name: "export manifest with secret",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --interval 10m --secret-ref=creds --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_secret.golden"),
|
|
},
|
|
{
|
|
name: "export manifest with verify secret",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --interval 10m --verify-provider=cosign --verify-secret-ref=cosign-pub --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_verify_secret.golden"),
|
|
},
|
|
{
|
|
name: "export manifest with layer selector",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --interval 10m --layer-selector=application/vnd.cncf.helm.chart.content.v1.tar+gzip:copy --export",
|
|
assertFunc: assertGoldenFile("./testdata/oci/export_with_layer_selector.golden"),
|
|
},
|
|
{
|
|
name: "invalid layer selector operation",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --layer-selector=application/vnd.cncf.helm.chart.content.v1.tar+gzip:move --export",
|
|
assertFunc: assertError("invalid --layer-selector \"application/vnd.cncf.helm.chart.content.v1.tar+gzip:move\": operation must be \"extract\" or \"copy\""),
|
|
},
|
|
{
|
|
name: "invalid layer selector format",
|
|
args: "create source oci podinfo --url=oci://ghcr.io/stefanprodan/manifests/podinfo --tag=6.3.5 --layer-selector=application/vnd.cncf.helm.chart.content.v1.tar+gzip --export",
|
|
assertFunc: assertError("invalid --layer-selector \"application/vnd.cncf.helm.chart.content.v1.tar+gzip\": must be in the format '<media-type>:<operation>'"),
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
cmd := cmdTestCase{
|
|
args: tt.args,
|
|
assert: tt.assertFunc,
|
|
}
|
|
|
|
cmd.runTestCmd(t)
|
|
})
|
|
}
|
|
}
|