3d2fd1b538
1. add new registry api under resources.kubesphere.io/v1alpha3 2. deprecate registry api v1alpha2 Registry API v1alpha2 uses docker client to authenticate image registry secret, which depends on docker.sock. We used to mount host `/var/run/docker.sock` to deployment. It will prevent us imgrating to containerd since no `docker.sock` exists. Registry API v1alpha3 comes to rescure, it wraps library go-containerregistry and compatible with docker registry, Harbor etc.
156 lines
3.5 KiB
Go
156 lines
3.5 KiB
Go
package v2
|
|
|
|
import (
|
|
"testing"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
|
|
"github.com/google/go-cmp/cmp"
|
|
v1 "github.com/google/go-containerregistry/pkg/v1"
|
|
)
|
|
|
|
func TestRegistryerConfig(t *testing.T) {
|
|
testCases := []struct {
|
|
name string
|
|
secret *corev1.Secret
|
|
image string
|
|
configFile *v1.ConfigFile
|
|
expectErr bool
|
|
}{
|
|
{
|
|
name: "Should fetch image config with public registry",
|
|
secret: nil,
|
|
image: "kubesphere/ks-apiserver:v3.1.0",
|
|
expectErr: false,
|
|
configFile: &v1.ConfigFile{
|
|
Config: v1.Config{
|
|
Image: "sha256:a3006bafb7702494227f7fa69720e65e1324b7bf8ece8ac03d9fe1d0134e7341",
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, testCase := range testCases {
|
|
|
|
t.Run(testCase.name, func(t *testing.T) {
|
|
secretAuthenticator, err := NewSecretAuthenticator(testCase.secret)
|
|
if err != nil {
|
|
t.Error(err)
|
|
}
|
|
|
|
// fix platform to linux/amd64 so we could compare config
|
|
platform := &v1.Platform{
|
|
OS: "linux",
|
|
Architecture: "amd64",
|
|
}
|
|
|
|
options := secretAuthenticator.Options()
|
|
options = append(options, WithPlatform(platform))
|
|
|
|
registryer := NewRegistryer(options...)
|
|
|
|
config, err := registryer.Config(testCase.image)
|
|
if testCase.expectErr && err == nil {
|
|
t.Errorf("expected error, but got nil")
|
|
}
|
|
|
|
if !testCase.expectErr && err != nil {
|
|
t.Error(err)
|
|
}
|
|
|
|
if diff := cmp.Diff(testCase.configFile.Config.Image, config.Config.Image); len(diff) != 0 {
|
|
t.Errorf("expected %v, but got %v", testCase.configFile.Config.Image, config.Config.Image)
|
|
}
|
|
})
|
|
}
|
|
|
|
}
|
|
|
|
func TestRegistryerListRepoTags(t *testing.T) {
|
|
testCases := []struct {
|
|
name string
|
|
secret *corev1.Secret
|
|
image string
|
|
repositoryTags RepositoryTags
|
|
expectErr bool
|
|
}{
|
|
{
|
|
name: "Should fetch config with public registry",
|
|
secret: nil,
|
|
image: "kubesphere/ks-apiserver",
|
|
expectErr: false,
|
|
repositoryTags: RepositoryTags{
|
|
Registry: "index.docker.io",
|
|
Tags: []string{
|
|
"v3.1.1",
|
|
"v3.1.0",
|
|
"latest",
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "Should fetch config from public registry with credential",
|
|
secret: buildSecret("dockerhub.qingcloud.com", "guest", "guest", false),
|
|
image: "dockerhub.qingcloud.com/calico/cni",
|
|
expectErr: false,
|
|
repositoryTags: RepositoryTags{
|
|
Registry: "dockerhub.qingcloud.com",
|
|
Tags: []string{
|
|
"v1.11.4",
|
|
"v3.1.3",
|
|
"v3.3.2",
|
|
"v3.3.3",
|
|
"v3.3.6",
|
|
"v3.7.3",
|
|
"v3.8.4",
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, testCase := range testCases {
|
|
|
|
t.Run(testCase.name, func(t *testing.T) {
|
|
secretAuthenticator, err := NewSecretAuthenticator(testCase.secret)
|
|
if err != nil {
|
|
t.Error(err)
|
|
}
|
|
|
|
// fix platform to linux/amd64 so we could compare config
|
|
platform := &v1.Platform{
|
|
OS: "linux",
|
|
Architecture: "amd64",
|
|
}
|
|
|
|
options := secretAuthenticator.Options()
|
|
options = append(options, WithPlatform(platform))
|
|
|
|
registryer := NewRegistryer(options...)
|
|
|
|
tags, err := registryer.ListRepositoryTags(testCase.image)
|
|
if testCase.expectErr && err == nil {
|
|
t.Errorf("expected error, but got nil")
|
|
}
|
|
|
|
if !testCase.expectErr && err != nil {
|
|
t.Error(err)
|
|
}
|
|
|
|
cotains := func(s []string, e string) bool {
|
|
for _, a := range s {
|
|
if a == e {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
for _, tag := range testCase.repositoryTags.Tags {
|
|
if !cotains(tags.Tags, tag) {
|
|
t.Errorf("no expected tag %s in result %v", tag, tags.Tags)
|
|
}
|
|
}
|
|
})
|
|
}
|
|
}
|