124 lines
2.8 KiB
YAML
124 lines
2.8 KiB
YAML
suite: NetworkPolicy
|
|
templates:
|
|
- networkpolicy.yaml
|
|
|
|
tests:
|
|
- it: should not create network policy by default
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: check defaults
|
|
release:
|
|
name: my-release
|
|
namespace: my-namespace
|
|
set:
|
|
policies:
|
|
networkPolicy:
|
|
enabled: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 2
|
|
- documentIndex: 0
|
|
equal:
|
|
path: metadata.name
|
|
value: vc-work-my-release
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.egress[2].to[1].ipBlock.cidr
|
|
value: 0.0.0.0/0
|
|
- documentIndex: 1
|
|
equal:
|
|
path: metadata.name
|
|
value: vc-cp-my-release
|
|
- documentIndex: 0
|
|
equal:
|
|
path: metadata.namespace
|
|
value: my-namespace
|
|
- documentIndex: 1
|
|
equal:
|
|
path: metadata.namespace
|
|
value: my-namespace
|
|
- documentIndex: 0
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 3
|
|
- documentIndex: 1
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 2
|
|
|
|
- it: check extra control plane rules
|
|
release:
|
|
name: my-release
|
|
namespace: my-namespace
|
|
set:
|
|
policies:
|
|
networkPolicy:
|
|
enabled: true
|
|
extraControlPlaneRules:
|
|
- ports:
|
|
- port: 443
|
|
- port: 8443
|
|
- port: 6443
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 2
|
|
- documentIndex: 0
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 3
|
|
- documentIndex: 1
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 3
|
|
- documentIndex: 1
|
|
equal:
|
|
path: spec.egress[2].ports[0].port
|
|
value: 443
|
|
- documentIndex: 1
|
|
equal:
|
|
path: spec.egress[2].ports[1].port
|
|
value: 8443
|
|
- documentIndex: 1
|
|
equal:
|
|
path: spec.egress[2].ports[2].port
|
|
value: 6443
|
|
|
|
- it: check extra workload rules
|
|
release:
|
|
name: my-release
|
|
namespace: my-namespace
|
|
set:
|
|
policies:
|
|
networkPolicy:
|
|
enabled: true
|
|
extraWorkloadRules:
|
|
- ports:
|
|
- port: 443
|
|
- port: 8443
|
|
- port: 6443
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 2
|
|
- documentIndex: 0
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 4
|
|
- documentIndex: 1
|
|
lengthEqual:
|
|
path: spec.egress
|
|
count: 2
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.egress[3].ports[0].port
|
|
value: 443
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.egress[3].ports[1].port
|
|
value: 8443
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.egress[3].ports[2].port
|
|
value: 6443
|