Merge pull request #384 from marzianor9/gatekeeper_test

Add gatekeeper testing

cnf-tests/TESTLIST.md

@@ -148,6 +148,12 @@ The cnf tests instrument each different feature required by CNF. Following, a de
 | Test Name | Description |
 | -- | ----------- |
 | [vrf]  Integration: NAD, IPAM: static, Interfaces: 1, Scheme: 2 Pods 2 VRFs OCP Primary network overlap {"IPStack":"ipv4"} | Verifies that it's possible to configure within the same node 1 VRF that overlaps pod's network + 2 non overlapping VRF on top of mac-vlan cni which is based on top of default route node's interface. Connectivity ICMP test. | 
+| gatekeeper should apply mutations by order | Verifies that gatekeeper mutations are applied by order | 
+| gatekeeper should avoid mutating existing metadata info(labels/annotations) | Verifies that gatekeeper will not mutate an objects label/annotation if it already exists. | 
+| gatekeeper should be able to add metadata info(labels/annotations) | Verifies that gatekeeper is able to mutate an object by adding a label/annotation to it. | 
+| gatekeeper should be able to match by any match category | Verifies that gatekeeper is able to match objects by mutation policy matching categories. | 
+| gatekeeper should be able to update mutation policy | Verifies that gatekeeper mutation policy can be updated and apply the updated mutation | 
+| gatekeeper should not apply mutations policies after deletion | Verifies that gatekeeper will not apply mutations from a deleted mutation policy. | 
 | xt_u32 Negative - xt_u32 disabled Should NOT create an iptable rule | Negative test: when the xt_u32 module is not enabled, appling an iptables rule that utilize the module should fail. | 
 | xt_u32 Validate the module is enabled and works Should create an iptables rule inside a pod that has the module enabled | Verifies that an iptables rule that utilize xt_u32 module can be applied successfully in a pod that has the module enabled. | 
 

cnf-tests/docgen/e2e.json

@@ -70,6 +70,12 @@
     "dpdk VFS split for dpdk and netdevice Run a regular pod using a vf shared with the dpdk's pf": "Verifies that a regular pod can run while sharing vfs with a pod using a vf for dpdk payload",
     "dpdk VFS split for dpdk and netdevice should forward and receive packets from a pod running dpdk base": "Verifies that the testpmd application inside a pod is able to receive and send packets, when the pf is shared between regular netdevice pods and dpdk pods.",
     "dpdk restoring configuration should restore the cluster to the original status": "Verifies that the cluster state is restored after running the dpdk tests.",
+    "gatekeeper should apply mutations by order": "Verifies that gatekeeper mutations are applied by order",
+    "gatekeeper should avoid mutating existing metadata info(labels/annotations)": "Verifies that gatekeeper will not mutate an objects label/annotation if it already exists.",
+    "gatekeeper should be able to add metadata info(labels/annotations)": "Verifies that gatekeeper is able to mutate an object by adding a label/annotation to it.",
+    "gatekeeper should be able to match by any match category": "Verifies that gatekeeper is able to match objects by mutation policy matching categories.",
+    "gatekeeper should be able to update mutation policy": "Verifies that gatekeeper mutation policy can be updated and apply the updated mutation",
+    "gatekeeper should not apply mutations policies after deletion": "Verifies that gatekeeper will not apply mutations from a deleted mutation policy.",
     "ptp Test Offset PTP configuration verifications PTP time diff between Grandmaster and Slave should be in range -100ms and 100ms": "Verifies that the time diff between master \u0026 slave is below 100 ms.",
     "ptp prometheus Metrics reported by PTP pods Should all be reported by prometheus": "Verifies that the PTP metrics are reported.",
     "sctp Negative - Sctp disabled Client Server Connection Should NOT start a server pod": "Negative test: when the sctp module is not enabled, verifies that the connectivity is not working.",