File: test_security_context_constraint.rb

package info (click to toggle)
ruby-kubeclient 4.13.0-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 1,112 kB
  • sloc: ruby: 4,225; makefile: 6
file content (64 lines) | stat: -rw-r--r-- 2,864 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# frozen_string_literal: true

require_relative 'test_helper'

# kind: 'SecurityContextConstraints' entity tests.
# This is one of the unusual `kind`s that are already plural (https://github.com/kubernetes/kubernetes/issues/8115).
# We force singular in method names like 'create_endpoint',
# but `kind` should remain plural as in kubernetes.
class TestSecurityContextConstraints < Minitest::Test
  def test_create_security_context_constraint
    stub_request(:get, %r{/apis/security.openshift.io/v1$}).to_return(
      body: open_test_file('security.openshift.io_api_resource_list.json'),
      status: 200
    )

    testing_scc = Kubeclient::Resource.new(
      metadata: {
        name: 'teleportation'
      },
      runAsUser: {
        type: 'MustRunAs'
      },
      seLinuxContext: {
        type: 'MustRunAs'
      }
    )
    req_body = '{"metadata":{"name":"teleportation"},"runAsUser":{"type":"MustRunAs"},' \
      '"seLinuxContext":{"type":"MustRunAs"},' \
      '"kind":"SecurityContextConstraints","apiVersion":"security.openshift.io/v1"}'

    stub_request(:post, 'http://localhost:8080/apis/security.openshift.io/v1/securitycontextconstraints')
      .with(body: req_body)
      .to_return(body: open_test_file('created_security_context_constraint.json'), status: 201)

    client = Kubeclient::Client.new('http://localhost:8080/apis/security.openshift.io', 'v1')
    created_scc = client.create_security_context_constraint(testing_scc)
    assert_equal('SecurityContextConstraints', created_scc.kind)
    assert_equal('security.openshift.io/v1', created_scc.apiVersion)

    client = Kubeclient::Client.new('http://localhost:8080/apis/security.openshift.io', 'v1',
                                    as: :parsed_symbolized)
    created_scc = client.create_security_context_constraint(testing_scc)
    assert_equal('SecurityContextConstraints', created_scc[:kind])
    assert_equal('security.openshift.io/v1', created_scc[:apiVersion])
  end

  def test_get_security_context_constraints
    stub_request(:get, %r{/apis/security.openshift.io/v1$}).to_return(
      body: open_test_file('security.openshift.io_api_resource_list.json'),
      status: 200
    )
    stub_request(:get, %r{/securitycontextconstraints})
      .to_return(body: open_test_file('security_context_constraint_list.json'), status: 200)
    client = Kubeclient::Client.new('http://localhost:8080/apis/security.openshift.io', 'v1')

    collection = client.get_security_context_constraints(as: :parsed_symbolized)
    assert_equal('SecurityContextConstraintsList', collection[:kind])
    assert_equal('security.openshift.io/v1', collection[:apiVersion])

    # Stripping of 'List' in collection.kind RecursiveOpenStruct mode only is historic.
    collection = client.get_security_context_constraints
    assert_equal('SecurityContextConstraints', collection.kind)
  end
end