mirror of
https://github.com/openshift/community.okd.git
synced 2026-03-27 03:13:08 +00:00
Fix integration tests for k8s 2.3 (#159)
* Fix integration tests for k8s 2.3 Previous to https://github.com/ansible-collections/kubernetes.core/pull/408 an attempt to list resources for which the user was not authorized resulted in an unhandled exception. The task now does not fail, but instead reports the error message. * try to fix sanity * Fix tests * fix tests * fix tests * Revert change to downstream build
This commit is contained in:
@@ -5,7 +5,7 @@ authors:
|
|||||||
- willthames (https://github.com/willthames)
|
- willthames (https://github.com/willthames)
|
||||||
- Akasurde (https://github.com/akasurde)
|
- Akasurde (https://github.com/akasurde)
|
||||||
dependencies:
|
dependencies:
|
||||||
kubernetes.core: '>=2.1.0,<2.3.0'
|
kubernetes.core: '>=2.1.0,<2.4.0'
|
||||||
description: OKD Collection for Ansible.
|
description: OKD Collection for Ansible.
|
||||||
documentation: ''
|
documentation: ''
|
||||||
homepage: ''
|
homepage: ''
|
||||||
|
|||||||
@@ -65,8 +65,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"nodes is forbidden: User" in error.msg'
|
||||||
# - '"nodes is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- name: list Pod for all namespace should failed
|
- name: list Pod for all namespace should failed
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -79,8 +78,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- name: list Pod for test namespace should failed
|
- name: list Pod for test namespace should failed
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -94,8 +92,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- set_fact:
|
- set_fact:
|
||||||
test_labels:
|
test_labels:
|
||||||
@@ -158,8 +155,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- name: list Pod for test namespace should succeed
|
- name: list Pod for test namespace should succeed
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -247,8 +243,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- name: list Pod for test namespace should failed
|
- name: list Pod for test namespace should failed
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -263,8 +258,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
- name: list Node using ServiceAccount
|
- name: list Node using ServiceAccount
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -281,7 +275,7 @@
|
|||||||
label_selectors:
|
label_selectors:
|
||||||
- phase=dev
|
- phase=dev
|
||||||
|
|
||||||
- name: list Node using ServiceAccount
|
- name: list Node using ServiceAccount should fail
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
api_key: "{{ api_token }}"
|
api_key: "{{ api_token }}"
|
||||||
host: "{{ cluster_host }}"
|
host: "{{ cluster_host }}"
|
||||||
@@ -293,8 +287,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"nodes is forbidden: User" in error.msg'
|
||||||
# - '"nodes is forbidden: User" in error.msg'
|
|
||||||
|
|
||||||
always:
|
always:
|
||||||
- name: Ensure namespace is deleted
|
- name: Ensure namespace is deleted
|
||||||
|
|||||||
@@ -90,8 +90,7 @@
|
|||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- error is failed
|
- '"pods is forbidden: User" in error.msg'
|
||||||
# - '"pods is forbidden: User" in error.module_stderr'
|
|
||||||
|
|
||||||
- name: Create a role to manage Pod from namespace "{{ test_ns }}"
|
- name: Create a role to manage Pod from namespace "{{ test_ns }}"
|
||||||
kubernetes.core.k8s:
|
kubernetes.core.k8s:
|
||||||
@@ -209,8 +208,7 @@
|
|||||||
- name: assert pod deletion failed due to forbidden user
|
- name: assert pod deletion failed due to forbidden user
|
||||||
assert:
|
assert:
|
||||||
that:
|
that:
|
||||||
- result is failed
|
- '"forbidden: User" in error.msg'
|
||||||
# - '"forbidden: User" in error.module_stderr'
|
|
||||||
|
|
||||||
- name: List Pod
|
- name: List Pod
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -290,8 +288,7 @@
|
|||||||
- name: assert user is not authorize to create pod anymore
|
- name: assert user is not authorize to create pod anymore
|
||||||
assert:
|
assert:
|
||||||
that:
|
that:
|
||||||
- result is failed
|
- '"forbidden: User" in error.msg'
|
||||||
# - '"forbidden: User" in error.module_stderr'
|
|
||||||
|
|
||||||
- name: List Pod
|
- name: List Pod
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
@@ -332,8 +329,7 @@
|
|||||||
- name: assert user is not authorize to list pod anymore
|
- name: assert user is not authorize to list pod anymore
|
||||||
assert:
|
assert:
|
||||||
that:
|
that:
|
||||||
- result is failed
|
- '"forbidden: User" in error.msg'
|
||||||
# - '"forbidden: User" in error.module_stderr'
|
|
||||||
|
|
||||||
always:
|
always:
|
||||||
- name: Ensure namespace is deleted
|
- name: Ensure namespace is deleted
|
||||||
|
|||||||
Reference in New Issue
Block a user