mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
357 lines
10 KiB
Go
357 lines
10 KiB
Go
package e2e
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
. "github.com/hanzoai/cd/pkg/apis/application/v1alpha1"
|
|
"github.com/hanzoai/cd/test/e2e/fixture"
|
|
accountFixture "github.com/hanzoai/cd/test/e2e/fixture/account"
|
|
"github.com/hanzoai/cd/test/e2e/fixture/app"
|
|
clusterFixture "github.com/hanzoai/cd/test/e2e/fixture/cluster"
|
|
"github.com/hanzoai/cd/util/errors"
|
|
)
|
|
|
|
func TestClusterList(t *testing.T) {
|
|
fixture.SkipIfAlreadyRun(t)
|
|
defer fixture.RecordTestRun(t)
|
|
|
|
last := ""
|
|
expected := fmt.Sprintf(`SERVER NAME VERSION STATUS MESSAGE PROJECT
|
|
https://kubernetes.default.svc in-cluster %v Successful `, fixture.GetVersions(t).ServerVersion.String())
|
|
|
|
ctx := clusterFixture.Given(t)
|
|
ctx.Project(fixture.ProjectName)
|
|
|
|
// We need an application targeting the cluster, otherwise the test will
|
|
// fail if run isolated.
|
|
app.GivenWithSameState(ctx).
|
|
Path(guestbookPath).
|
|
When().
|
|
CreateApp()
|
|
|
|
tries := 25
|
|
for i := 0; i <= tries; i++ {
|
|
clusterFixture.GivenWithSameState(ctx).
|
|
When().
|
|
List().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
last = output
|
|
})
|
|
if expected == last {
|
|
break
|
|
} else if i < tries {
|
|
// We retry with a simple backoff
|
|
time.Sleep(time.Duration(i+1) * 100 * time.Millisecond)
|
|
}
|
|
}
|
|
assert.Equal(t, expected, last)
|
|
}
|
|
|
|
func TestClusterAdd(t *testing.T) {
|
|
ctx := clusterFixture.Given(t)
|
|
ctx.Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
List().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
assert.Contains(t, fixture.NormalizeOutput(output), fmt.Sprintf(`https://kubernetes.default.svc %s %v Successful %s`, ctx.GetName(), fixture.GetVersions(t).ServerVersion.String(), fixture.ProjectName))
|
|
})
|
|
}
|
|
|
|
func TestClusterAddPermissionDenied(t *testing.T) {
|
|
ctx := accountFixture.Given(t)
|
|
ctx.Name("test").
|
|
When().
|
|
Create().
|
|
Login().
|
|
SetPermissions([]fixture.ACL{}, "org-admin")
|
|
|
|
clusterFixture.
|
|
GivenWithSameState(ctx).
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
IgnoreErrors().
|
|
Create().
|
|
Then().
|
|
AndCLIOutput(func(_ string, err error) {
|
|
assert.ErrorContains(t, err, "PermissionDenied desc = permission denied")
|
|
})
|
|
}
|
|
|
|
func TestClusterAddAllowed(t *testing.T) {
|
|
accountCtx := accountFixture.Given(t)
|
|
accountCtx.Name("test").
|
|
When().
|
|
Create().
|
|
Login().
|
|
SetPermissions([]fixture.ACL{
|
|
{
|
|
Resource: "clusters",
|
|
Action: "create",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
{
|
|
Resource: "clusters",
|
|
Action: "get",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
}, "org-admin")
|
|
|
|
ctx := clusterFixture.GivenWithSameState(accountCtx)
|
|
ctx.Project(fixture.ProjectName).
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
List().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
assert.Contains(t, fixture.NormalizeOutput(output), fmt.Sprintf(`https://kubernetes.default.svc %s %v Successful %s`, ctx.GetName(), fixture.GetVersions(t).ServerVersion.String(), fixture.ProjectName))
|
|
})
|
|
}
|
|
|
|
func TestClusterListDenied(t *testing.T) {
|
|
ctx := accountFixture.Given(t)
|
|
ctx.Name("test").
|
|
When().
|
|
Create().
|
|
Login().
|
|
SetPermissions([]fixture.ACL{
|
|
{
|
|
Resource: "clusters",
|
|
Action: "create",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
}, "org-admin")
|
|
|
|
clusterFixture.
|
|
GivenWithSameState(ctx).
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
List().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
assert.Equal(t, "SERVER NAME VERSION STATUS MESSAGE PROJECT", output)
|
|
})
|
|
}
|
|
|
|
func TestClusterSet(t *testing.T) {
|
|
ctx := clusterFixture.Given(t)
|
|
ctx.Project(fixture.ProjectName).
|
|
Namespaces([]string{"namespace-edit-1", "namespace-edit-2"}).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
SetNamespaces().
|
|
GetByName().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
assert.Contains(t, output, "namespace-edit-1")
|
|
assert.Contains(t, output, "namespace-edit-2")
|
|
})
|
|
}
|
|
|
|
func TestClusterGet(t *testing.T) {
|
|
fixture.SkipIfAlreadyRun(t)
|
|
fixture.EnsureCleanState(t)
|
|
defer fixture.RecordTestRun(t)
|
|
output := errors.NewHandler(t).FailOnErr(fixture.RunCli("cluster", "get", "https://kubernetes.default.svc")).(string)
|
|
|
|
assert.Contains(t, output, "name: in-cluster")
|
|
assert.Contains(t, output, "server: https://kubernetes.default.svc")
|
|
assert.Contains(t, output, fmt.Sprintf(`serverVersion: %v`, fixture.GetVersions(t).ServerVersion.String()))
|
|
assert.Contains(t, output, `config:
|
|
tlsClientConfig:
|
|
insecure: false`)
|
|
|
|
assert.Contains(t, output, `status: Successful`)
|
|
}
|
|
|
|
func TestClusterNameInRestAPI(t *testing.T) {
|
|
fixture.EnsureCleanState(t)
|
|
|
|
var cluster Cluster
|
|
err := fixture.DoHttpJsonRequest("GET", "/api/v1/clusters/in-cluster?id.type=name", &cluster)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "in-cluster", cluster.Name)
|
|
assert.Contains(t, cluster.Server, "https://kubernetes.default.svc")
|
|
|
|
err = fixture.DoHttpJsonRequest("PUT",
|
|
"/api/v1/clusters/in-cluster?id.type=name&updatedFields=labels", &cluster, []byte(`{"labels":{"test": "val"}}`)...)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, map[string]string{"test": "val"}, cluster.Labels)
|
|
}
|
|
|
|
func TestClusterURLInRestAPI(t *testing.T) {
|
|
fixture.EnsureCleanState(t)
|
|
|
|
clusterURL := url.QueryEscape(KubernetesInternalAPIServerAddr)
|
|
|
|
var cluster Cluster
|
|
err := fixture.DoHttpJsonRequest("GET", "/api/v1/clusters/"+clusterURL, &cluster)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "in-cluster", cluster.Name)
|
|
assert.Contains(t, cluster.Server, "https://kubernetes.default.svc")
|
|
|
|
err = fixture.DoHttpJsonRequest("PUT",
|
|
fmt.Sprintf("/api/v1/clusters/%s?&updatedFields=labels", clusterURL), &cluster, []byte(`{"labels":{"test": "val"}}`)...)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, map[string]string{"test": "val"}, cluster.Labels)
|
|
}
|
|
|
|
func TestClusterSkipReconcileAnnotation(t *testing.T) {
|
|
fixture.EnsureCleanState(t)
|
|
|
|
clusterURL := url.QueryEscape(KubernetesInternalAPIServerAddr)
|
|
|
|
var cluster Cluster
|
|
err := fixture.DoHttpJsonRequest("PUT",
|
|
fmt.Sprintf("/api/v1/clusters/%s?updatedFields=annotations", clusterURL),
|
|
&cluster,
|
|
fmt.Appendf(nil, `{"annotations":{%q:"true"}}`, "cd.hanzo.ai/skip-reconcile")...)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "true", cluster.Annotations["cd.hanzo.ai/skip-reconcile"])
|
|
|
|
var cluster2 Cluster
|
|
err = fixture.DoHttpJsonRequest("GET", "/api/v1/clusters/"+clusterURL, &cluster2)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "in-cluster", cluster2.Name)
|
|
assert.Equal(t, "true", cluster2.Annotations["cd.hanzo.ai/skip-reconcile"])
|
|
|
|
err = fixture.DoHttpJsonRequest("PUT",
|
|
fmt.Sprintf("/api/v1/clusters/%s?updatedFields=annotations", clusterURL),
|
|
&cluster,
|
|
[]byte(`{"annotations":{}}`)...)
|
|
require.NoError(t, err)
|
|
}
|
|
|
|
func TestClusterDeleteDenied(t *testing.T) {
|
|
ctx := accountFixture.Given(t)
|
|
ctx.Name("test").
|
|
When().
|
|
Create().
|
|
Login().
|
|
SetPermissions([]fixture.ACL{
|
|
{
|
|
Resource: "clusters",
|
|
Action: "create",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
{
|
|
Resource: "clusters",
|
|
Action: "get",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
}, "org-admin")
|
|
|
|
// Attempt to remove cluster creds by name
|
|
clusterFixture.
|
|
GivenWithSameState(ctx).
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
DeleteByName().
|
|
Then().
|
|
AndCLIOutput(func(_ string, err error) {
|
|
assert.ErrorContains(t, err, "PermissionDenied desc = permission denied")
|
|
})
|
|
|
|
// Attempt to remove cluster creds by server
|
|
clusterFixture.
|
|
GivenWithSameState(ctx).
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
Create().
|
|
DeleteByServer().
|
|
Then().
|
|
AndCLIOutput(func(_ string, err error) {
|
|
assert.ErrorContains(t, err, "PermissionDenied desc = permission denied")
|
|
})
|
|
}
|
|
|
|
func TestClusterDelete(t *testing.T) {
|
|
ctx := clusterFixture.Given(t)
|
|
accountFixture.GivenWithSameState(ctx).
|
|
When().
|
|
Create().
|
|
Login().
|
|
SetPermissions([]fixture.ACL{
|
|
{
|
|
Resource: "clusters",
|
|
Action: "create",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
{
|
|
Resource: "clusters",
|
|
Action: "get",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
{
|
|
Resource: "clusters",
|
|
Action: "delete",
|
|
Scope: fixture.ProjectName + "/*",
|
|
},
|
|
}, "org-admin")
|
|
|
|
clstAction := ctx.
|
|
Project(fixture.ProjectName).
|
|
Upsert(true).
|
|
Server(KubernetesInternalAPIServerAddr).
|
|
When().
|
|
CreateWithRBAC()
|
|
clstAction.
|
|
Then().
|
|
Expect().
|
|
AndCLIOutput(func(_ string, err error) {
|
|
assert.NoError(t, err)
|
|
})
|
|
|
|
// Check that RBAC is created
|
|
_, err := fixture.Run("", "kubectl", "get", "serviceaccount", "cd-manager", "-n", "kube-system")
|
|
require.NoError(t, err, "Expected no error from not finding serviceaccount cd-manager")
|
|
|
|
_, err = fixture.Run("", "kubectl", "get", "clusterrole", "cd-manager-role")
|
|
require.NoError(t, err, "Expected no error from not finding clusterrole cd-manager-role")
|
|
|
|
_, err = fixture.Run("", "kubectl", "get", "clusterrolebinding", "cd-manager-role-binding")
|
|
require.NoError(t, err, "Expected no error from not finding clusterrolebinding cd-manager-role-binding")
|
|
|
|
clstAction.DeleteByName().
|
|
Then().
|
|
AndCLIOutput(func(output string, _ error) {
|
|
assert.Equal(t, fmt.Sprintf("Cluster '%s' removed", ctx.GetName()), output)
|
|
})
|
|
|
|
// Check that RBAC is removed after delete
|
|
output, err := fixture.Run("", "kubectl", "get", "serviceaccount", "cd-manager", "-n", "kube-system")
|
|
require.Error(t, err, "Expected error from not finding serviceaccount cd-manager but got:\n%s", output)
|
|
|
|
output, err = fixture.Run("", "kubectl", "get", "clusterrole", "cd-manager-role")
|
|
require.Error(t, err, "Expected error from not finding clusterrole cd-manager-role but got:\n%s", output)
|
|
|
|
output, err = fixture.Run("", "kubectl", "get", "clusterrolebinding", "cd-manager-role-binding")
|
|
assert.Error(t, err, "Expected error from not finding clusterrolebinding cd-manager-role-binding but got:\n%s", output)
|
|
}
|