mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-01-05 21:15:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add LDAPIdentityProvider and ActiveDirectoryIdentityProvider to the Supervisor TLS config static validation integration tests

Browse Source 
Co-authored-by: Ryan Richard <richardry@vmware.com>
This commit is contained in:
Joshua Casey
2024-07-23 17:22:21 -05:00
committed by Ryan Richard
parent 4b2ed52f44
commit b7c26c43ca
1 changed files with 59 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

60
test/integration/supervisor_tls_spec_test.go
View File

@@ -31,6 +31,35 @@ func TestTLSSpecKubeBuilderValidationSupervisor_Parallel(t *testing.T) {
%s
`)
ldapIDPTemplate := here.Doc(`
apiVersion: idp.supervisor.%s/v1alpha1
kind: LDAPIdentityProvider
metadata:
name: %s
spec:
host: %s
bind:
secretName: foo-bar-bind-credentials
userSearch:
base: foo
attributes:
username: bar
uid: baz
%s
`)
activeDirectoryIDPTemplate := here.Doc(`
apiVersion: idp.supervisor.%s/v1alpha1
kind: ActiveDirectoryIdentityProvider
metadata:
name: %s
spec:
host: %s
bind:
secretName: foo-bar-bind-credentials
%s
`)
githubIDPTemplate := here.Doc(`
apiVersion: idp.supervisor.%s/v1alpha1
kind: GitHubIdentityProvider
@@ -52,7 +81,6 @@ func TestTLSSpecKubeBuilderValidationSupervisor_Parallel(t *testing.T) {
expectedError string
expectedGitHubError string
}{
// TODO: make this a loop to also run the same tests on LDAP, AD, GitHub??
{
name: "should disallow certificate authority data source with missing name",
tlsYAML: here.Doc(`
@@ -202,6 +230,36 @@ func TestTLSSpecKubeBuilderValidationSupervisor_Parallel(t *testing.T) {
)
})
t.Run("apply LDAP IDP", func(t *testing.T) {
resourceName := "test-ldap-idp-" + testlib.RandHex(t, 7)
yamlBytes := []byte(fmt.Sprintf(ldapIDPTemplate,
env.APIGroupSuffix, resourceName, env.SupervisorUpstreamLDAP.Host, indentedTLSYAML))
performKubectlApply(
t,
yamlBytes,
`ldapidentityprovider.idp.supervisor.pinniped.dev`,
tc.expectedError,
"LDAPIdentityProvider",
resourceName,
)
})
t.Run("apply ActiveDirectory IDP", func(t *testing.T) {
resourceName := "test-ad-idp-" + testlib.RandHex(t, 7)
yamlBytes := []byte(fmt.Sprintf(activeDirectoryIDPTemplate,
env.APIGroupSuffix, resourceName, env.SupervisorUpstreamLDAP.Host, indentedTLSYAML))
performKubectlApply(
t,
yamlBytes,
`activedirectoryidentityprovider.idp.supervisor.pinniped.dev`,
tc.expectedError,
"ActiveDirectoryIdentityProvider",
resourceName,
)
})
t.Run("apply GitHub IDP", func(t *testing.T) {
// GitHub is nested deeper
indentedTLSYAMLForGitHub := strings.ReplaceAll(indentedTLSYAML, "\n", "\n ")