Add initial version with help and admission controller (#1)

- It adds a helm chart that will be hosted in the Github pages URL of this repository - an admission controller operator - Basic documentation for installing the operator, configuring CRDs and example pod configuration
2026-09-13 18:59:09 +00:00 · 2025-01-29 22:44:09 +01:00
parent 50aa9ada37
commit 64091a6439
45 changed files with 4638 additions and 9 deletions
@@ -0,0 +1,124 @@
+package v1
+
+import (
+	"context"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/types"
+
+	netbirdiov1 "github.com/netbirdio/kubernetes-operator/api/v1"
+)
+
+var _ = Describe("NBSetupKey Webhook", func() {
+	var (
+		obj          *netbirdiov1.NBSetupKey
+		validator    NBSetupKeyCustomValidator
+		resourceName = "test"
+		secret       *corev1.Secret
+	)
+
+	BeforeEach(func() {
+		obj = &netbirdiov1.NBSetupKey{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "test",
+				Namespace: "default",
+			},
+		}
+		validator = NBSetupKeyCustomValidator{
+			client: k8sClient,
+		}
+		Expect(validator).NotTo(BeNil(), "Expected validator to be initialized")
+		Expect(obj).NotTo(BeNil(), "Expected obj to be initialized")
+	})
+
+	AfterEach(func() {
+	})
+
+	Context("When creating or updating NBSetupKey under Validating Webhook", func() {
+		When("secretKeyRef is empty", func() {
+			It("Should fail", func() {
+				obj.Spec = netbirdiov1.NBSetupKeySpec{}
+				warnings, err := validator.ValidateCreate(context.Background(), obj)
+				Expect(err).To(HaveOccurred())
+				Expect(warnings).To(BeEmpty())
+			})
+		})
+
+		When("secret doesn't exist", func() {
+			It("Should fail", func() {
+				obj.Spec = netbirdiov1.NBSetupKeySpec{
+					SecretKeyRef: corev1.SecretKeySelector{
+						LocalObjectReference: corev1.LocalObjectReference{
+							Name: resourceName,
+						},
+						Key: "setupkey",
+					},
+				}
+				warnings, err := validator.ValidateCreate(context.Background(), obj)
+				Expect(err).NotTo(HaveOccurred())
+				Expect(warnings).NotTo(BeEmpty())
+			})
+		})
+
+		Context("secret exists", Ordered, func() {
+			createSecret := func(secretkey, setupkey string) {
+				resource := &corev1.Secret{
+					ObjectMeta: metav1.ObjectMeta{
+						Namespace: "default",
+						Name:      resourceName,
+					},
+					Data: map[string][]byte{
+						secretkey: []byte(setupkey),
+					},
+				}
+
+				secret = &corev1.Secret{}
+				err := k8sClient.Get(ctx, types.NamespacedName{Namespace: "default", Name: resourceName}, secret)
+				if err == nil {
+					Expect(k8sClient.Delete(ctx, secret)).To(Succeed())
+				}
+				Expect(k8sClient.Create(ctx, resource)).To(Succeed())
+			}
+
+			BeforeEach(func() {
+				obj.Spec = netbirdiov1.NBSetupKeySpec{
+					SecretKeyRef: corev1.SecretKeySelector{
+						LocalObjectReference: corev1.LocalObjectReference{
+							Name: resourceName,
+						},
+						Key: "setupkey",
+					},
+				}
+			})
+
+			When("secret key doesn't exist", func() {
+				It("Should fail", func() {
+					createSecret("wrongkey", "EEEEEEEE-EEEE-EEEE-EEEE-EEEEEEEEEEEE")
+					warnings, err := validator.ValidateCreate(context.Background(), obj)
+					Expect(err).NotTo(HaveOccurred())
+					Expect(warnings).NotTo(BeEmpty())
+				})
+			})
+			When("setup key is invalid", func() {
+				It("Should fail", func() {
+					createSecret("setupkey", "EEEEEEEE")
+					warnings, err := validator.ValidateCreate(context.Background(), obj)
+					Expect(err).NotTo(HaveOccurred())
+					Expect(warnings).NotTo(BeEmpty())
+				})
+			})
+			When("setup key is valid", func() {
+				It("Should allow creation", func() {
+					createSecret("setupkey", "EEEEEEEE-EEEE-EEEE-EEEE-EEEEEEEEEEEE")
+					warnings, err := validator.ValidateCreate(context.Background(), obj)
+					Expect(err).NotTo(HaveOccurred())
+					Expect(warnings).To(BeEmpty())
+				})
+			})
+		})
+	})
+
+})