Add test for builtin secretgenerator plugin.

This commit is contained in:
Jeffrey Regan
2019-05-07 16:10:39 -07:00
parent 03ad8efcba
commit 2825888ffd
6 changed files with 143 additions and 35 deletions

View File

@@ -111,6 +111,23 @@ func (th *KustTestHarness) WriteDefaultConfigs(fName string) {
} }
} }
func (th *KustTestHarness) LoadAndRunGenerator(
config string) resmap.ResMap {
res, err := th.rf.RF().FromBytes([]byte(config))
if err != nil {
th.t.Fatalf("Err: %v", err)
}
g, err := th.pl.LoadGenerator(th.ldr, res)
if err != nil {
th.t.Fatalf("Err: %v", err)
}
rm, err := g.Generate()
if err != nil {
th.t.Fatalf("Err: %v", err)
}
return rm
}
func tabToSpace(input string) string { func tabToSpace(input string) string {
var result []string var result []string
for _, i := range input { for _, i := range input {

View File

@@ -48,36 +48,54 @@ func (l *Loader) LoadGenerators(
ldr ifc.Loader, rm resmap.ResMap) ([]transformers.Generator, error) { ldr ifc.Loader, rm resmap.ResMap) ([]transformers.Generator, error) {
var result []transformers.Generator var result []transformers.Generator
for _, res := range rm { for _, res := range rm {
c, err := l.loadAndConfigurePlugin(ldr, res) g, err := l.LoadGenerator(ldr, res)
if err != nil { if err != nil {
return nil, err return nil, err
} }
g, ok := c.(transformers.Generator)
if !ok {
return nil, fmt.Errorf("plugin %s not a generator", res.Id())
}
result = append(result, g) result = append(result, g)
} }
return result, nil return result, nil
} }
func (l *Loader) LoadGenerator(
ldr ifc.Loader, res *resource.Resource) (transformers.Generator, error) {
c, err := l.loadAndConfigurePlugin(ldr, res)
if err != nil {
return nil, err
}
g, ok := c.(transformers.Generator)
if !ok {
return nil, fmt.Errorf("plugin %s not a generator", res.Id())
}
return g, nil
}
func (l *Loader) LoadTransformers( func (l *Loader) LoadTransformers(
ldr ifc.Loader, rm resmap.ResMap) ([]transformers.Transformer, error) { ldr ifc.Loader, rm resmap.ResMap) ([]transformers.Transformer, error) {
var result []transformers.Transformer var result []transformers.Transformer
for _, res := range rm { for _, res := range rm {
c, err := l.loadAndConfigurePlugin(ldr, res) t, err := l.LoadTransformer(ldr, res)
if err != nil { if err != nil {
return nil, err return nil, err
} }
t, ok := c.(transformers.Transformer)
if !ok {
return nil, fmt.Errorf("plugin %s not a transformer", res.Id())
}
result = append(result, t) result = append(result, t)
} }
return result, nil return result, nil
} }
func (l *Loader) LoadTransformer(
ldr ifc.Loader, res *resource.Resource) (transformers.Transformer, error) {
c, err := l.loadAndConfigurePlugin(ldr, res)
if err != nil {
return nil, err
}
t, ok := c.(transformers.Transformer)
if !ok {
return nil, fmt.Errorf("plugin %s not a transformer", res.Id())
}
return t, nil
}
func pluginPath(id resid.ResId) string { func pluginPath(id resid.ResId) string {
return filepath.Join(id.Gvk().Group, id.Gvk().Version, id.Gvk().Kind) return filepath.Join(id.Gvk().Group, id.Gvk().Version, id.Gvk().Kind)
} }

View File

@@ -0,0 +1,26 @@
package resmap
import (
"sigs.k8s.io/kustomize/pkg/ifc"
"sigs.k8s.io/kustomize/pkg/types"
)
func GeneratorArgsFromKunstruct(k ifc.Kunstructured) (
result types.GeneratorArgs, err error) {
result.Name = k.GetName()
// TODO: validate behavior values.
result.Behavior, err = k.GetFieldValue("behavior")
if err != nil {
return
}
result.EnvSources, err = k.GetStringSlice("envFiles")
if err != nil {
return
}
result.FileSources, err = k.GetStringSlice("valueFiles")
if err != nil {
return
}
result.LiteralSources, err = k.GetStringSlice("literals")
return
}

View File

@@ -71,7 +71,7 @@ func writeSecretGeneratorConfig(th *kusttest_test.KustTestHarness, root string)
apiVersion: builtin apiVersion: builtin
kind: SecretGenerator kind: SecretGenerator
metadata: metadata:
name: secretGenerator name: mySecret
behavior: merge behavior: merge
envFiles: envFiles:
- a.env - a.env
@@ -90,13 +90,10 @@ DB_PASSWORD=iloveyou
`) `)
th.WriteF(filepath.Join(root, "longsecret.txt"), ` th.WriteF(filepath.Join(root, "longsecret.txt"), `
Lorem ipsum dolor sit amet, Lorem ipsum dolor sit amet,
consectetur adipiscing elit, consectetur adipiscing elit.
sed do eiusmod tempor incididunt
ut labore et dolore magna aliqua.
`) `)
} }
// nolint:lll
func TestSecretGenerator(t *testing.T) { func TestSecretGenerator(t *testing.T) {
tc := plugintest_test.NewPluginTestEnv(t).Set() tc := plugintest_test.NewPluginTestEnv(t).Set()
defer tc.Reset() defer tc.Reset()
@@ -122,10 +119,10 @@ data:
FRUIT: YXBwbGU= FRUIT: YXBwbGU=
ROUTER_PASSWORD: YWRtaW4= ROUTER_PASSWORD: YWRtaW4=
VEGETABLE: Y2Fycm90 VEGETABLE: Y2Fycm90
longsecret.txt: CkxvcmVtIGlwc3VtIGRvbG9yIHNpdCBhbWV0LApjb25zZWN0ZXR1ciBhZGlwaXNjaW5nIGVsaXQsCnNlZCBkbyBlaXVzbW9kIHRlbXBvciBpbmNpZGlkdW50CnV0IGxhYm9yZSBldCBkb2xvcmUgbWFnbmEgYWxpcXVhLgo= longsecret.txt: CkxvcmVtIGlwc3VtIGRvbG9yIHNpdCBhbWV0LApjb25zZWN0ZXR1ciBhZGlwaXNjaW5nIGVsaXQuCg==
kind: Secret kind: Secret
metadata: metadata:
name: -ktm999dkcc name: mySecret-g4g4kh4f7t
type: Opaque type: Opaque
`) `)
} }

View File

@@ -18,28 +18,16 @@ type plugin struct {
var KustomizePlugin plugin var KustomizePlugin plugin
func (p *plugin) Config( func (p *plugin) Config(
ldr ifc.Loader, rf *resmap.Factory, k ifc.Kunstructured) error { ldr ifc.Loader, rf *resmap.Factory, k ifc.Kunstructured) (err error) {
p.ldr = ldr p.ldr = ldr
p.rf = rf p.rf = rf
var err error p.args.GeneratorArgs, err = resmap.GeneratorArgsFromKunstruct(k)
// TODO: validate behavior values.
p.args.Behavior, err = k.GetFieldValue("behavior")
if err != nil { if err != nil {
return err return
} }
p.args.EnvSources, err = k.GetStringSlice("envFiles") // Ignore missing type - it defaults.
if err != nil { p.args.Type, _ = k.GetFieldValue("type")
return err return
}
p.args.FileSources, err = k.GetStringSlice("valueFiles")
if err != nil {
return err
}
p.args.LiteralSources, err = k.GetStringSlice("literals")
if err != nil {
return err
}
return nil
} }
func (p *plugin) Generate() (resmap.ResMap, error) { func (p *plugin) Generate() (resmap.ResMap, error) {

View File

@@ -0,0 +1,62 @@
package builtin
import (
"testing"
"sigs.k8s.io/kustomize/internal/plugintest"
"sigs.k8s.io/kustomize/k8sdeps/kv/plugin"
"sigs.k8s.io/kustomize/pkg/kusttest"
"sigs.k8s.io/kustomize/pkg/loader"
)
func TestSecretGenerator(t *testing.T) {
tc := plugintest_test.NewPluginTestEnv(t).Set()
defer tc.Reset()
tc.BuildGoPlugin(
"builtin", "", "SecretGenerator")
th := kusttest_test.NewKustTestHarnessFull(
t, "/app", loader.RestrictionRootOnly, plugin.ActivePluginConfig())
th.WriteF("/app/a.env", `
ROUTER_PASSWORD=admin
`)
th.WriteF("/app/b.env", `
DB_PASSWORD=iloveyou
`)
th.WriteF("/app/longsecret.txt", `
Lorem ipsum dolor sit amet,
consectetur adipiscing elit.
`)
rm := th.LoadAndRunGenerator(`
apiVersion: builtin
kind: SecretGenerator
metadata:
name: mySecret
behavior: merge
envFiles:
- a.env
- b.env
valueFiles:
- obscure=longsecret.txt
literals:
- FRUIT=apple
- VEGETABLE=carrot
`)
th.AssertActualEqualsExpected(rm, `
apiVersion: v1
data:
DB_PASSWORD: aWxvdmV5b3U=
FRUIT: YXBwbGU=
ROUTER_PASSWORD: YWRtaW4=
VEGETABLE: Y2Fycm90
obscure: CkxvcmVtIGlwc3VtIGRvbG9yIHNpdCBhbWV0LApjb25zZWN0ZXR1ciBhZGlwaXNjaW5nIGVsaXQuCg==
kind: Secret
metadata:
name: mySecret
type: Opaque
`)
}