mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
84 lines
2.7 KiB
Go
84 lines
2.7 KiB
Go
package admin
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
|
|
"github.com/hanzoai/cd/pkg/apis/application/v1alpha1"
|
|
"github.com/hanzoai/cd/pkg/client/clientset/versioned/fake"
|
|
)
|
|
|
|
const (
|
|
namespace = "default"
|
|
)
|
|
|
|
func newProj(name string, roleNames ...string) *v1alpha1.AppProject {
|
|
var roles []v1alpha1.ProjectRole
|
|
for i := range roleNames {
|
|
roles = append(roles, v1alpha1.ProjectRole{Name: roleNames[i]})
|
|
}
|
|
return &v1alpha1.AppProject{ObjectMeta: metav1.ObjectMeta{
|
|
Name: name,
|
|
Namespace: namespace,
|
|
}, Spec: v1alpha1.AppProjectSpec{
|
|
Roles: roles,
|
|
}}
|
|
}
|
|
|
|
func TestUpdateProjects_FindMatchingProject(t *testing.T) {
|
|
ctx := t.Context()
|
|
|
|
clientset := fake.NewSimpleClientset(newProj("foo", "test"), newProj("bar", "test"))
|
|
|
|
modification, err := getModification("set", "*", "*", "allow")
|
|
require.NoError(t, err)
|
|
err = updateProjects(ctx, clientset.ArgoprojV1alpha1().AppProjects(namespace), "ba*", "*", "set", modification, false)
|
|
require.NoError(t, err)
|
|
|
|
fooProj, err := clientset.ArgoprojV1alpha1().AppProjects(namespace).Get(ctx, "foo", metav1.GetOptions{})
|
|
require.NoError(t, err)
|
|
assert.Empty(t, fooProj.Spec.Roles[0].Policies)
|
|
|
|
barProj, err := clientset.ArgoprojV1alpha1().AppProjects(namespace).Get(ctx, "bar", metav1.GetOptions{})
|
|
require.NoError(t, err)
|
|
assert.Equal(t, []string{"p, proj:bar:test, *, set, bar/*, allow"}, barProj.Spec.Roles[0].Policies)
|
|
}
|
|
|
|
func TestUpdateProjects_FindMatchingRole(t *testing.T) {
|
|
ctx := t.Context()
|
|
|
|
clientset := fake.NewSimpleClientset(newProj("proj", "foo", "bar"))
|
|
|
|
modification, err := getModification("set", "*", "*", "allow")
|
|
require.NoError(t, err)
|
|
err = updateProjects(ctx, clientset.ArgoprojV1alpha1().AppProjects(namespace), "*", "fo*", "set", modification, false)
|
|
require.NoError(t, err)
|
|
|
|
proj, err := clientset.ArgoprojV1alpha1().AppProjects(namespace).Get(ctx, "proj", metav1.GetOptions{})
|
|
require.NoError(t, err)
|
|
assert.Equal(t, []string{"p, proj:proj:foo, *, set, proj/*, allow"}, proj.Spec.Roles[0].Policies)
|
|
assert.Empty(t, proj.Spec.Roles[1].Policies)
|
|
}
|
|
|
|
func TestGetModification_SetPolicy(t *testing.T) {
|
|
modification, err := getModification("set", "*", "*", "allow")
|
|
require.NoError(t, err)
|
|
policy := modification("proj", "myaction")
|
|
assert.Equal(t, "*, myaction, proj/*, allow", policy)
|
|
}
|
|
|
|
func TestGetModification_RemovePolicy(t *testing.T) {
|
|
modification, err := getModification("remove", "*", "*", "allow")
|
|
require.NoError(t, err)
|
|
policy := modification("proj", "myaction")
|
|
assert.Empty(t, policy)
|
|
}
|
|
|
|
func TestGetModification_NotSupported(t *testing.T) {
|
|
_, err := getModification("bar", "*", "*", "allow")
|
|
assert.Errorf(t, err, "modification bar is not supported")
|
|
}
|