Merge pull request #8 from viccuad/main

deps: Consume kubewarden-policy-sdk 0.1.2

Author: viccuad

e2e.bats

@@ -14,7 +14,7 @@
 
 @test "accept because hostname is not on the deny list" {
   run kwctl run annotated-policy.wasm -r test_data/pod_with_hostname.json --settings-json '{"denied_hostnames": ["forbidden-host"]}'
-  
+
   # this prints the output when one the checks below fails
   echo "output = ${output}"
 
@@ -25,7 +25,7 @@
 
 @test "accept because the deny list is empty" {
   run kwctl run annotated-policy.wasm -r test_data/pod_with_hostname.json
-  
+
   # this prints the output when one the checks below fails
   echo "output = ${output}"
 
@@ -36,7 +36,7 @@
 
 @test "accept because pod has no hostname set" {
   run kwctl run annotated-policy.wasm -r test_data/pod.json --settings-json '{"denied_hostnames": ["forbidden-host"]}'
-  
+
   # this prints the output when one the checks below fails
   echo "output = ${output}"
 
@@ -46,12 +46,12 @@
 }
 
 @test "accept non-pod resources" {
-  run kwctl run annotated-policy.wasm -r test_data/pod.json --settings-json '{"denied_hostnames": ["forbidden-host"]}'
-  
+  run kwctl run annotated-policy.wasm -r test_data/service.json --settings-json '{"denied_hostnames": ["forbidden-host"]}'
+
   # this prints the output when one the checks below fails
   echo "output = ${output}"
 
   # request accepted (not a pod)
   [ "$status" -eq 0 ]
   [ $(expr "$output" : '.*allowed.*true') -ne 0 ]
-}
+}

package.json

@@ -37,6 +37,6 @@
     "url": "https://github.com/kubewarden/js-policy-template/issues"
   },
   "dependencies": {
-    "kubewarden-policy-sdk": "^0.1.0-alpha.1"
+    "kubewarden-policy-sdk": "^0.1.2"
   }
 }

test_data/service.json

@@ -0,0 +1,69 @@
+{
+  "uid": "1299d386-525b-4032-98ae-1949f69f9cfc",
+  "kind": {
+    "group": "",
+    "version": "v1",
+    "kind": "Service"
+  },
+  "resource": {
+    "group": "",
+    "version": "v1",
+    "resource": "services"
+  },
+  "requestKind": {
+    "group": "",
+    "version": "v1",
+    "kind": "Service"
+  },
+  "requestResource": {
+    "group": "",
+    "version": "v1",
+    "resource": "services"
+  },
+  "name": "nginx",
+  "namespace": "default",
+  "operation": "CREATE",
+  "userInfo": {
+    "username": "kubernetes-admin",
+    "groups": [
+      "system:masters",
+      "system:authenticated"
+    ]
+  },
+  "object": {
+    "kind": "Service",
+    "apiVersion": "v1",
+    "metadata": {
+      "name": "nginx",
+      "namespace": "default",
+      "uid": "04dc7a5e-e1f1-4e34-8d65-2c9337a43e64",
+      "creationTimestamp": "2020-11-12T15:18:36Z",
+      "labels": {
+        "env": "test"
+      }
+    },
+    "spec": {
+      "selector": {
+        "app": "nginx"
+      },
+      "sessionAffinity": "None",
+      "type": "NodePort",
+      "ports": [
+        {
+          "port": 80,
+          "targetPort": 80,
+          "nodePort": 30080
+        }
+      ]
+    },
+    "status": {
+      "loadBalancer": {}
+    }
+  },
+  "oldObject": null,
+  "dryRun": false,
+  "options": {
+    "kind": "CreateOptions",
+    "apiVersion": "meta.k8s.io/v1"
+  }
+}