-
Notifications
You must be signed in to change notification settings - Fork 78
/
pre_provisioned_keyvault_tester.go
84 lines (69 loc) · 2.97 KB
/
pre_provisioned_keyvault_tester.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
/*
Copyright 2020 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package testsuites
import (
"context"
"fmt"
"github.com/onsi/ginkgo/v2"
v1 "k8s.io/api/core/v1"
clientset "k8s.io/client-go/kubernetes"
"k8s.io/kubernetes/test/e2e/framework"
"sigs.k8s.io/blob-csi-driver/pkg/blob"
"sigs.k8s.io/blob-csi-driver/test/e2e/driver"
"sigs.k8s.io/blob-csi-driver/test/utils/azure"
)
// PreProvisionedKeyVaultTest will provision required PV(s), PVC(s) and Pod(s)
// Testing that the Pod(s) can be created successfully with provided Key Vault
// which is used to store storage account name and key
type PreProvisionedKeyVaultTest struct {
CSIDriver driver.PreProvisionedVolumeTestDriver
Pods []PodDetails
Driver *blob.Driver
}
func (t *PreProvisionedKeyVaultTest) Run(ctx context.Context, client clientset.Interface, namespace *v1.Namespace) {
keyVaultClient, err := azure.NewKeyVaultClient()
framework.ExpectNoError(err)
for _, pod := range t.Pods {
for n, volume := range pod.Volumes {
// In the method GetStorageAccountAndContainer, we can get an account key of the blob volume
// by calling azure API, but not the sas token...
accountName, accountKey, _, containerName, err := t.Driver.GetStorageAccountAndContainer(ctx, volume.VolumeID, nil, nil)
framework.ExpectNoError(err, fmt.Sprintf("Error GetStorageAccountAndContainer from volumeID(%s): %v", volume.VolumeID, err))
ginkgo.By("creating KeyVault...")
vault, err := keyVaultClient.CreateVault(ctx)
framework.ExpectNoError(err)
defer func() {
err := keyVaultClient.CleanVault(ctx)
framework.ExpectNoError(err)
}()
ginkgo.By("creating secret for storage account key...")
accountKeySecret, err := keyVaultClient.CreateSecret(ctx, accountName+"-key", accountKey)
framework.ExpectNoError(err)
pod.Volumes[n].Attrib["containerName"] = containerName
pod.Volumes[n].Attrib["storageAccountName"] = accountName
pod.Volumes[n].Attrib["keyVaultURL"] = *vault.Properties.VaultURI
pod.Volumes[n].Attrib["keyVaultSecretName"] = *accountKeySecret.Name
ginkgo.By("test storage account key...")
tpod, cleanup := pod.SetupWithPreProvisionedVolumes(ctx, client, namespace, t.CSIDriver)
// defer must be called here for resources not get removed before using them
for i := range cleanup {
defer cleanup[i](ctx)
}
ginkgo.By("deploying the pod")
tpod.Create(ctx)
defer tpod.Cleanup(ctx)
ginkgo.By("checking that the pods command exits with no error")
tpod.WaitForSuccess(ctx)
}
}
}