github.com/oam-dev/kubevela@v1.9.11/test/e2e-multicluster-test/multicluster_auth_test.go (about)

     1  /*
     2  Copyright 2021 The KubeVela Authors.
     3  
     4  Licensed under the Apache License, Version 2.0 (the "License");
     5  you may not use this file except in compliance with the License.
     6  You may obtain a copy of the License at
     7  
     8  	http://www.apache.org/licenses/LICENSE-2.0
     9  
    10  Unless required by applicable law or agreed to in writing, software
    11  distributed under the License is distributed on an "AS IS" BASIS,
    12  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13  See the License for the specific language governing permissions and
    14  limitations under the License.
    15  */
    16  
    17  package e2e_multicluster_test
    18  
    19  import (
    20  	"context"
    21  
    22  	. "github.com/onsi/ginkgo/v2"
    23  	. "github.com/onsi/gomega"
    24  	metav1 "k8s.io/api/core/v1"
    25  	apitypes "k8s.io/apimachinery/pkg/types"
    26  
    27  	"github.com/oam-dev/kubevela/pkg/multicluster"
    28  )
    29  
    30  var _ = Describe("Test multicluster Auth commands", func() {
    31  
    32  	Context("Test vela auth commands", func() {
    33  
    34  		It("Test vela create kubeconfig for given user", func() {
    35  			outputs, err := execCommand("auth", "gen-kubeconfig", "--user", "kubevela", "--group", "kubevela:dev", "--group", "kubevela:test")
    36  			Expect(err).Should(Succeed())
    37  			Expect(outputs).Should(ContainSubstring("Certificate signing request kubevela-csr-kubevela approved"))
    38  		})
    39  
    40  		It("Test vela create kubeconfig for serviceaccount", func() {
    41  			outputs, err := execCommand("auth", "gen-kubeconfig", "--serviceaccount", "default", "-n", "vela-system")
    42  			Expect(err).Should(Succeed())
    43  			Expect(outputs).Should(ContainSubstring("ServiceAccount vela-system/default found."))
    44  		})
    45  
    46  		It("Test vela list-privileges for user", func() {
    47  			outputs, err := execCommand("auth", "list-privileges", "--user", "example", "--group", "kubevela:dev-team", "--group", "kubevela:test-team")
    48  			Expect(err).Should(Succeed())
    49  			Expect(outputs).Should(ContainSubstring("local"))
    50  		})
    51  
    52  		It("Test vela list-privileges for ServiceAccount", func() {
    53  			outputs, err := execCommand("auth", "list-privileges", "--serviceaccount", "node-controller", "-n", "kube-system", "--cluster", "local", "--cluster", WorkerClusterName)
    54  			Expect(err).Should(Succeed())
    55  			Expect(outputs).Should(SatisfyAny(
    56  				ContainSubstring(WorkerClusterName),
    57  				ContainSubstring("nodes/status"),
    58  			))
    59  		})
    60  
    61  		It("Test vela list-privileges for kubeconfig", func() {
    62  			outputs, err := execCommand("auth", "list-privileges", "--kubeconfig", WorkerClusterKubeConfigPath, "--cluster", "local")
    63  			Expect(err).Should(Succeed())
    64  			Expect(outputs).Should(ContainSubstring("cluster-admin"))
    65  		})
    66  
    67  		It("Test vela grant-privileges for user and create namespace", func() {
    68  			_, err := execCommand("auth", "grant-privileges", "--user", "alice", "--for-namespace", "alice", "--create-namespace", "--for-cluster", "local", "--for-cluster", WorkerClusterName)
    69  			Expect(err).Should(Succeed())
    70  			Expect(k8sClient.Get(multicluster.ContextWithClusterName(context.Background(), "local"), apitypes.NamespacedName{Name: "alice"}, &metav1.Namespace{})).Should(Succeed())
    71  			Expect(k8sClient.Get(multicluster.ContextWithClusterName(context.Background(), WorkerClusterName), apitypes.NamespacedName{Name: "alice"}, &metav1.Namespace{})).Should(Succeed())
    72  		})
    73  
    74  		It("Test vela grant-privileges for groups and readonly", func() {
    75  			_, err := execCommand("auth", "grant-privileges", "--group", "kubevela:dev-team", "--group", "kubevela:test-team", "--readonly")
    76  			Expect(err).Should(Succeed())
    77  		})
    78  
    79  		It("Test vela grant-privileges for serviceaccount", func() {
    80  			_, err := execCommand("auth", "grant-privileges", "--serviceaccount", "default", "-n", "default", "--for-namespace", "default")
    81  			Expect(err).Should(Succeed())
    82  		})
    83  
    84  		It("Test vela grant-privileges for kubeconfig with cluster-scoped privileges", func() {
    85  			_, err := execCommand("auth", "grant-privileges", "--kubeconfig", WorkerClusterKubeConfigPath, "--for-cluster", WorkerClusterName)
    86  			Expect(err).Should(Succeed())
    87  		})
    88  
    89  	})
    90  
    91  })