66 lines
2.1 KiB
Go
66 lines
2.1 KiB
Go
/*
|
|
Copyright 2018 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package admission
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
auditinternal "k8s.io/apiserver/pkg/apis/audit"
|
|
)
|
|
|
|
func TestAddAnnotation(t *testing.T) {
|
|
attr := &attributesRecord{}
|
|
|
|
// test AddAnnotation
|
|
attr.AddAnnotation("foo.admission.k8s.io/key1", "value1")
|
|
attr.AddAnnotation("foo.admission.k8s.io/key2", "value2")
|
|
annotations := attr.getAnnotations(auditinternal.LevelMetadata)
|
|
assert.Equal(t, annotations["foo.admission.k8s.io/key1"], "value1")
|
|
|
|
// test overwrite
|
|
assert.Error(t, attr.AddAnnotation("foo.admission.k8s.io/key1", "value1-overwrite"),
|
|
"admission annotations should not be allowd to be overwritten")
|
|
annotations = attr.getAnnotations(auditinternal.LevelMetadata)
|
|
assert.Equal(t, annotations["foo.admission.k8s.io/key1"], "value1", "admission annotations should not be overwritten")
|
|
|
|
// test invalid plugin names
|
|
var testCases = map[string]string{
|
|
"invalid dns subdomain": "INVALID-DNS-Subdomain/policy",
|
|
"no plugin name": "policy",
|
|
"no key name": "foo.admission.k8s.io",
|
|
"empty key": "",
|
|
}
|
|
for name, invalidKey := range testCases {
|
|
err := attr.AddAnnotation(invalidKey, "value-foo")
|
|
assert.Error(t, err)
|
|
annotations = attr.getAnnotations(auditinternal.LevelMetadata)
|
|
assert.Equal(t, annotations[invalidKey], "", name+": invalid pluginName is not allowed ")
|
|
}
|
|
|
|
// test all saved annotations
|
|
assert.Equal(
|
|
t,
|
|
annotations,
|
|
map[string]string{
|
|
"foo.admission.k8s.io/key1": "value1",
|
|
"foo.admission.k8s.io/key2": "value2",
|
|
},
|
|
"unexpected final annotations",
|
|
)
|
|
}
|