e77dce38b2
* feat: allow server netPol to specify podSelector * feat(test): add podSelector NetworkPolicy unittest * chore: introduce server.networkPolicy.ingress As suggested let users template the whole ingress object for the networkPolicy than only the podSelector. Co-authored-by: tvoran <444265+tvoran@users.noreply.github.com> --------- Co-authored-by: tvoran <444265+tvoran@users.noreply.github.com>
46 lines
1.7 KiB
Bash
Executable file
46 lines
1.7 KiB
Bash
Executable file
#!/usr/bin/env bats
|
|
|
|
load _helpers
|
|
|
|
@test "server/network-policy: disabled by default" {
|
|
cd `chart_dir`
|
|
local actual=$( (helm template \
|
|
--show-only templates/server-network-policy.yaml \
|
|
. || echo "---") | tee /dev/stderr |
|
|
yq 'length > 0' | tee /dev/stderr)
|
|
[ "${actual}" = "false" ]
|
|
}
|
|
|
|
@test "server/network-policy: enabled by server.networkPolicy.enabled" {
|
|
cd `chart_dir`
|
|
local actual=$( (helm template \
|
|
--set 'server.networkPolicy.enabled=true' \
|
|
--show-only templates/server-network-policy.yaml \
|
|
. || echo "---") | tee /dev/stderr |
|
|
yq 'length > 0' | tee /dev/stderr)
|
|
[ "${actual}" = "true" ]
|
|
}
|
|
|
|
@test "server/network-policy: ingress changed by server.networkPolicy.ingress" {
|
|
cd `chart_dir`
|
|
local actual=$(helm template \
|
|
--set 'server.networkPolicy.enabled=true' \
|
|
--set 'server.networkPolicy.ingress[0].from[0].podSelector.matchLabels.foo=bar' \
|
|
--show-only templates/server-network-policy.yaml \
|
|
. | tee /dev/stderr |
|
|
yq -r '.spec.ingress[0].from[0].podSelector.matchLabels.foo' | tee /dev/stderr)
|
|
[ "${actual}" = "bar" ]
|
|
}
|
|
|
|
@test "server/network-policy: egress enabled by server.networkPolicy.egress" {
|
|
cd `chart_dir`
|
|
local actual=$(helm template \
|
|
--set 'server.networkPolicy.enabled=true' \
|
|
--set 'server.networkPolicy.egress[0].to[0].ipBlock.cidr=10.0.0.0/24' \
|
|
--set 'server.networkPolicy.egress[0].ports[0].protocol=TCP' \
|
|
--set 'server.networkPolicy.egress[0].ports[0].port=443' \
|
|
--show-only templates/server-network-policy.yaml \
|
|
. | tee /dev/stderr |
|
|
yq -r '.spec.egress[0].to[0].ipBlock.cidr' | tee /dev/stderr)
|
|
[ "${actual}" = "10.0.0.0/24" ]
|
|
}
|