def test_list(self):
count = 10
config = _utils.create_config()
if _utils.is_reachable(config):
for i in range(0, count):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
secret.create()
secret = _utils.create_secret(name="yosecret")
_list = secret.list()
for x in _list:
self.assertIsInstance(x, K8sSecret)
self.assertGreaterEqual(count + 1, len(_list)) # including service-account-token on GCE
def test_list(self):
count = 10
config = _utils.create_config()
if _utils.is_reachable(config):
for i in range(0, count):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
secret.create()
secret = _utils.create_secret(name="yosecret")
_list = secret.list()
for x in _list:
self.assertIsInstance(x, K8sSecret)
self.assertGreaterEqual(
count + 1,
len(_list)) # including service-account-token on GCE
def test_pod_secret(self):
container_name = "nginx"
container_image = "nginx:1.7.9"
container = _utils.create_container(name=container_name, image=container_image)
secret_name = "yosecret"
secret = _utils.create_secret(name=secret_name)
k = ".secret-file"
v = "dmFsdWUtMg0KDQo="
secret.data = {k: v}
vol_name = "secret"
vol_type = "secret"
volume = _utils.create_volume(name=vol_name, type=vol_type)
volume.secret_name = secret_name
mount_name = vol_name
mount_path = '/test-secret'
mount = K8sVolumeMount(name=mount_name, mount_path=mount_path)
container.add_volume_mount(mount)
pod_name = "nginx"
pod = _utils.create_pod(name=pod_name)
pod.add_volume(volume)
pod.add_container(container)
if _utils.is_reachable(pod.config):
secret.create()
pod.create()
volnames = [x.name for x in pod.volumes]
self.assertIn(vol_name, volnames)
def test_set_data_invalid_value(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {"key1": "value1", "key2": "value2"}
with self.assertRaises(SyntaxError):
secret.data = {k: v}
def test_set_data_invalid_value(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {'key1': 'value1', 'key2': 'value2'}
with self.assertRaises(SyntaxError):
secret.data = {k: v}
def test_set_service_account_token_none_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
try:
secret.set_service_account_token()
except Exception as err:
self.assertIsInstance(err, SyntaxError)
def test_add_annotation_invalid_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = object()
v = object()
with self.assertRaises(SyntaxError):
secret.add_annotation(k, v)
def test_create(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
secret.create()
_list = secret.list()
self.assertEqual(2, len(_list)) # service-account-token + 1
def test_add_annotation_invalid_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = object()
v = object()
with self.assertRaises(SyntaxError):
secret.add_annotation(k, v)
def test_set_service_account_token_none_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
try:
secret.set_service_account_token()
except Exception as err:
self.assertIsInstance(err, SyntaxError)
def test_set_data_invalid_value(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {'key1': 'value1', 'key2': 'value2'}
with self.assertRaises(SyntaxError):
secret.data = {k: v}
def test_create(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
secret.create()
_list = secret.list()
self.assertEqual(2, len(_list)) # service-account-token + 1
def test_list_without_create(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
_list = secret.list()
self.assertGreaterEqual(1, len(_list)) # service-account-token on GCE
for x in _list:
self.assertIsInstance(x, K8sSecret)
def test_add_annotation(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
secret.add_annotation(k, v)
self.assertIn(k, secret.annotations)
self.assertEqual(v, secret.annotations[k])
def test_init_with_name(self):
name = "yoname"
secret = _utils.create_secret(name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.name, name)
self.assertEqual('default', secret.config.namespace)
self.assertEqual('Secret', secret.obj_type)
def test_set_data(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {'key1': 'value1', 'key2': 'value2'}
secret.data = {k: json.dumps(v)}
self.assertIn(k, secret.data)
self.assertEqual(json.dumps(v), secret.data[k])
def test_add_label(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
secret.add_label(k, v)
self.assertIn(k, secret.labels)
self.assertEqual(v, secret.labels[k])
def test_add_label(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
secret.add_label(k, v)
self.assertIn(k, secret.labels)
self.assertEqual(v, secret.labels[k])
def test_add_annotation(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
secret.add_annotation(k, v)
self.assertIn(k, secret.annotations)
self.assertEqual(v, secret.annotations[k])
def test_init_with_name(self):
name = "yoname"
secret = _utils.create_secret(name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.name, name)
self.assertEqual('default', secret.config.namespace)
self.assertEqual('Secret', secret.obj_type)
def test_set_data(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {"key1": "value1", "key2": "value2"}
secret.data = {k: json.dumps(v)}
self.assertIn(k, secret.data)
self.assertEqual(json.dumps(v), secret.data[k])
def test_set_data(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
k = "yokey"
v = {'key1': 'value1', 'key2': 'value2'}
secret.data = {k: json.dumps(v)}
self.assertIn(k, secret.data)
self.assertEqual(json.dumps(v), secret.data[k])
def test_struct_k8s_secret(self):
name = "yoname"
secret = _utils.create_secret(name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret.base_url, str)
self.assertIsInstance(secret.config, K8sConfig)
self.assertIsInstance(secret.model, Secret)
self.assertIsInstance(secret.name, str)
self.assertIsInstance(secret.obj_type, str)
def test_list_without_create(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
_list = secret.list()
self.assertGreaterEqual(1,
len(_list)) # service-account-token on GCE
for x in _list:
self.assertIsInstance(x, K8sSecret)
def test_delete_nonexistent(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
try:
secret.delete()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, NotFoundException)
def test_get_doesnt_exist(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
try:
secret.get()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, NotFoundException)
def test_delete_nonexistent(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
try:
secret.delete()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, NotFoundException)
def test_get_doesnt_exist(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
try:
secret.get()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, NotFoundException)
def test_struct_k8s_secret(self):
name = "yoname"
secret = _utils.create_secret(name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret.base_url, str)
self.assertIsInstance(secret.config, K8sConfig)
self.assertIsInstance(secret.model, Secret)
self.assertIsInstance(secret.name, str)
self.assertIsInstance(secret.obj_type, str)
def test_issue_64(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret_data = {"test": "test"}
secret = _utils.create_secret(name=name)
secret.data = secret_data
if _utils.is_reachable(secret.config):
secret.create()
secret.get()
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.data, secret_data)
def test_init_with_name_and_config(self):
name = "yoname"
nspace = "yomama"
config = K8sConfig(kubeconfig=_utils.kubeconfig_fallback, namespace=nspace)
secret = _utils.create_secret(config=config, name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.name, name)
self.assertEqual(secret.config.namespace, nspace)
self.assertEqual('Secret', secret.obj_type)
def test_issue_64(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret_data = {"test": "test"}
secret = _utils.create_secret(name=name)
secret.data = secret_data
if _utils.is_reachable(secret.config):
secret.create()
secret.get()
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.data, secret_data)
def test_create_already_exists(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
secret.create()
try:
secret.create()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, AlreadyExistsException)
def test_create_already_exists(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
secret.create()
try:
secret.create()
self.fail("Should not fail.")
except Exception as err:
self.assertIsInstance(err, AlreadyExistsException)
def test_get(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
from_create = secret.create()
self.assertIsInstance(from_create, K8sSecret)
self.assertEqual(from_create.name, name)
from_get = secret.get()
self.assertIsInstance(from_get, K8sSecret)
self.assertEqual(from_get.name, name)
self.assertEqual(from_create, from_get)
def test_init_with_name_and_config(self):
name = "yoname"
nspace = "yomama"
config = K8sConfig(kubeconfig=_utils.kubeconfig_fallback,
namespace=nspace)
secret = _utils.create_secret(config=config, name=name)
self.assertIsNotNone(secret)
self.assertIsInstance(secret, K8sSecret)
self.assertEqual(secret.name, name)
self.assertEqual(secret.config.namespace, nspace)
self.assertEqual('Secret', secret.obj_type)
def test_get(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
from_create = secret.create()
self.assertIsInstance(from_create, K8sSecret)
self.assertEqual(from_create.name, name)
from_get = secret.get()
self.assertIsInstance(from_get, K8sSecret)
self.assertEqual(from_get.name, name)
self.assertEqual(from_create, from_get)
def test_set_default_dockerconfigjson(self):
name = "docker-registry"
secret = _utils.create_secret(name=name)
data = {"auths": {"repo:port": {"auth": "authstring", "email": "*****@*****.**"}}}
secret.dockerconfigjson = data
self.assertEqual('kubernetes.io/dockerconfigjson', secret.type)
self.assertIn('.dockerconfigjson', secret.data)
self.assertEqual(data, secret.dockerconfigjson)
if _utils.is_reachable(secret.config):
s = secret.create()
self.assertIsInstance(s, K8sSecret)
def test_update_data(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
if _utils.is_reachable(secret.config):
secret.create()
secret.data = {k: v}
secret.update()
from_get = secret.get()
self.assertEqual('Opaque', from_get.type)
d = from_get.data[k]
self.assertEqual(d, v)
def test_update_data(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
k = "yokey"
v = "yovalue"
if _utils.is_reachable(secret.config):
secret.create()
secret.data = {k: v}
secret.update()
from_get = secret.get()
self.assertEqual('Opaque', from_get.type)
d = from_get.data[k]
self.assertEqual(d, v)
def test_delete(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
_list = secret.list()
count_before_create = len(_list)
secret.create()
_list = secret.list()
count_after_create = len(_list)
self.assertEqual(count_before_create + 1, count_after_create)
secret.delete()
_list = secret.list()
count_final = len(_list)
self.assertEqual(count_before_create, count_final)
def test_delete(self):
name = "yosecret-{0}".format(str(uuid.uuid4()))
secret = _utils.create_secret(name=name)
if _utils.is_reachable(secret.config):
_list = secret.list()
count_before_create = len(_list)
secret.create()
_list = secret.list()
count_after_create = len(_list)
self.assertEqual(count_before_create + 1, count_after_create)
secret.delete()
_list = secret.list()
count_final = len(_list)
self.assertEqual(count_before_create, count_final)
def test_set_system_dockerconfigjson(self):
name = "docker-registry"
config = _utils.create_config()
config.namespace = 'kube-system'
secret = _utils.create_secret(config=config, name=name)
data = {"auths": {"repo:port": {"auth": "authstring", "email": "*****@*****.**"}}}
secret.dockerconfigjson = data
self.assertEqual('kubernetes.io/dockerconfigjson', secret.type)
self.assertIn('.dockerconfigjson', secret.data)
self.assertEqual(data, secret.dockerconfigjson)
if _utils.is_reachable(secret.config):
try:
secret.delete()
except NotFoundException:
pass
s = secret.create()
self.assertIsInstance(s, K8sSecret)
def test_set_service_account_token_invalid_args(self):
name = "yosecret"
account_name = object()
account_uid = object()
token = object()
kubecfg_data = object()
cacert = object()
secret = _utils.create_secret(name=name)
try:
secret.set_service_account_token(account_name=account_name,
account_uid=account_uid,
token=token,
kubecfg_data=kubecfg_data,
cacert=cacert)
except Exception as err:
self.assertIsInstance(err, SyntaxError)
def test_set_default_dockerconfigjson(self):
name = "docker-registry"
secret = _utils.create_secret(name=name)
data = {
"auths": {
"repo:port": {
"auth": "authstring",
"email": "*****@*****.**"
}
}
}
secret.dockerconfigjson = data
self.assertEqual('kubernetes.io/.dockerconfigjson', secret.type)
self.assertIn('.dockerconfigjson', secret.data)
self.assertEqual(data, secret.dockerconfigjson)
if _utils.is_reachable(secret.config):
s = secret.create()
self.assertIsInstance(s, K8sSecret)
def test_set_service_account_token_invalid_args(self):
name = "yosecret"
account_name = object()
account_uid = object()
token = object()
kubecfg_data = object()
cacert = object()
secret = _utils.create_secret(name=name)
try:
secret.set_service_account_token(
account_name=account_name,
account_uid=account_uid,
token=token,
kubecfg_data=kubecfg_data,
cacert=cacert
)
except Exception as err:
self.assertIsInstance(err, SyntaxError)
def test_set_service_account_token(self):
name = "yosecret"
account_name = "yoaccountname"
account_uid = "yoaccountid"
token = "yotoken"
kubecfg_data = "yokubecfgdata"
cacert = "yocacert"
secret = _utils.create_secret(name=name)
secret.set_service_account_token(account_name=account_name,
account_uid=account_uid,
token=token,
kubecfg_data=kubecfg_data,
cacert=cacert)
self.assertEqual('kubernetes.io/service-account-token', secret.type)
self.assertIn('ca.crt', secret.data)
self.assertIn('kubernetes.kubeconfig', secret.data)
self.assertIn('token', secret.data)
self.assertEqual(cacert, secret.data['ca.crt'])
self.assertEqual(kubecfg_data, secret.data['kubernetes.kubeconfig'])
self.assertEqual(token, secret.data['token'])
self.assertIn('kubernetes.io/service-account.name', secret.annotations)
self.assertIn('kubernetes.io/service-account.uid', secret.annotations)
self.assertIn('kubernetes.io/service-account.name', secret.annotations)
self.assertIn('kubernetes.io/service-account.uid', secret.annotations)
self.assertEqual(
account_name,
secret.annotations['kubernetes.io/service-account.name'])
self.assertEqual(
account_uid,
secret.annotations['kubernetes.io/service-account.uid'])
self.assertEqual(
account_name,
secret.annotations['kubernetes.io/service-account.name'])
self.assertEqual(
account_uid,
secret.annotations['kubernetes.io/service-account.uid'])
def test_rc_secret(self):
container_name = "nginx"
container_image = "nginx:1.7.9"
container_nginx = _utils.create_container(name=container_name,
image=container_image)
container_name = "redis"
container_image = "redis:3.0.7"
container_redis = _utils.create_container(name=container_name,
image=container_image)
secret_name = "yosecret"
secret = _utils.create_secret(name=secret_name)
k = ".secret-file"
v = "dmFsdWUtMg0KDQo="
secret.data = {k: v}
vol_name = "secret"
vol_type = "secret"
volume = _utils.create_volume(name=vol_name, type=vol_type)
volume.secret_name = secret_name
mount_name = vol_name
mount_path = '/test-secret'
mount = K8sVolumeMount(name=mount_name, mount_path=mount_path)
container_nginx.add_volume_mount(mount)
container_redis.add_volume_mount(mount)
rc_name = "app"
rc = _utils.create_rc(name=rc_name)
rc.add_volume(volume)
rc.add_container(container_nginx)
rc.add_container(container_redis)
rc.desired_replicas = 1
if _utils.is_reachable(rc.config):
secret.create()
rc.create()
volnames = [x.name for x in rc.volumes]
self.assertIn(vol_name, volnames)
def test_set_system_dockerconfigjson(self):
name = "docker-registry"
config = _utils.create_config()
config.namespace = 'kube-system'
secret = _utils.create_secret(config=config, name=name)
data = {
"auths": {
"repo:port": {
"auth": "authstring",
"email": "*****@*****.**"
}
}
}
secret.dockerconfigjson = data
self.assertEqual('kubernetes.io/.dockerconfigjson', secret.type)
self.assertIn('.dockerconfigjson', secret.data)
self.assertEqual(data, secret.dockerconfigjson)
if _utils.is_reachable(secret.config):
try:
secret.delete()
except NotFoundException:
pass
s = secret.create()
self.assertIsInstance(s, K8sSecret)
def test_set_service_account_token(self):
name = "yosecret"
account_name = "yoaccountname"
account_uid = "yoaccountid"
token = "yotoken"
kubecfg_data = "yokubecfgdata"
cacert = "yocacert"
secret = _utils.create_secret(name=name)
secret.set_service_account_token(
account_name=account_name,
account_uid=account_uid,
token=token,
kubecfg_data=kubecfg_data,
cacert=cacert
)
self.assertEqual('kubernetes.io/service-account-token', secret.type)
self.assertIn('ca.crt', secret.data)
self.assertIn('kubernetes.kubeconfig', secret.data)
self.assertIn('token', secret.data)
self.assertEqual(cacert, secret.data['ca.crt'])
self.assertEqual(kubecfg_data, secret.data['kubernetes.kubeconfig'])
self.assertEqual(token, secret.data['token'])
self.assertIn('kubernetes.io/service-account.name', secret.annotations)
self.assertIn('kubernetes.io/service-account.uid', secret.annotations)
self.assertIn('kubernetes.io/service-account.name', secret.annotations)
self.assertIn('kubernetes.io/service-account.uid', secret.annotations)
self.assertEqual(account_name, secret.annotations['kubernetes.io/service-account.name'])
self.assertEqual(account_uid, secret.annotations['kubernetes.io/service-account.uid'])
self.assertEqual(account_name, secret.annotations['kubernetes.io/service-account.name'])
self.assertEqual(account_uid, secret.annotations['kubernetes.io/service-account.uid'])
def test_init_with_invalid_name(self):
name = object()
with self.assertRaises(SyntaxError):
_utils.create_secret(name=name)
def test_init_with_invalid_name(self):
name = object()
with self.assertRaises(SyntaxError):
_utils.create_secret(name=name)
def test_set_dockercfg_json_secret_invalid_arg(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
data = object()
with self.assertRaises(SyntaxError):
secret.dockerconfigjson = data
def test_struct(self):
name = "yoname"
secret = _utils.create_secret(name=name)
model = secret.model
self.assertIsInstance(model, Secret)
def test_set_type(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
t = "yosecrettype"
secret.type = t
self.assertEqual(t, secret.type)
def test_struct(self):
name = "yoname"
secret = _utils.create_secret(name=name)
model = secret.model
self.assertIsInstance(model, Secret)
def test_add_annotation_none_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
with self.assertRaises(SyntaxError):
secret.add_annotation()
def test_set_type_invalid_arg(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
secret_type = object()
with self.assertRaises(SyntaxError):
secret.type = secret_type
def test_add_annotation_none_args(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
with self.assertRaises(SyntaxError):
secret.add_annotation()
def test_set_dockercfg_json_secret_none_arg(self):
name = "yosecret"
secret = _utils.create_secret(name=name)
with self.assertRaises(SyntaxError):
secret.dockerconfigjson = None
