qontract-reconcile 0.10.1rc1202__py3-none-any.whl → 0.10.2.dev1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- qontract_reconcile-0.10.2.dev1.dist-info/METADATA +500 -0
- {qontract_reconcile-0.10.1rc1202.dist-info → qontract_reconcile-0.10.2.dev1.dist-info}/RECORD +12 -130
- {qontract_reconcile-0.10.1rc1202.dist-info → qontract_reconcile-0.10.2.dev1.dist-info}/WHEEL +1 -2
- {qontract_reconcile-0.10.1rc1202.dist-info → qontract_reconcile-0.10.2.dev1.dist-info}/entry_points.txt +1 -0
- reconcile/aws_account_manager/README.md +5 -0
- reconcile/change_owners/README.md +34 -0
- reconcile/glitchtip/README.md +150 -0
- reconcile/gql_definitions/introspection.json +51176 -0
- reconcile/run_integration.py +293 -0
- reconcile/utils/binary.py +2 -2
- reconcile/utils/mr/README.md +198 -0
- reconcile/utils/oc_map.py +2 -2
- tools/qontract_cli.py +0 -0
- qontract_reconcile-0.10.1rc1202.dist-info/METADATA +0 -64
- qontract_reconcile-0.10.1rc1202.dist-info/top_level.txt +0 -3
- reconcile/test/__init__.py +0 -0
- reconcile/test/conftest.py +0 -157
- reconcile/test/fixtures.py +0 -24
- reconcile/test/saas_auto_promotions_manager/__init__.py +0 -0
- reconcile/test/saas_auto_promotions_manager/conftest.py +0 -170
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/__init__.py +0 -0
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/__init__.py +0 -0
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/conftest.py +0 -115
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/data_keys.py +0 -19
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_desired_state.py +0 -66
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_merge_request_manager.py +0 -86
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_mr_parser.py +0 -352
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_reconciler.py +0 -494
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/__init__.py +0 -0
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/conftest.py +0 -25
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_multiple_namespaces.py +0 -37
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_single_namespace.py +0 -81
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_single_target.py +0 -61
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_json_path_selector.py +0 -74
- reconcile/test/saas_auto_promotions_manager/test_integration_test.py +0 -52
- reconcile/test/saas_auto_promotions_manager/utils/__init__.py +0 -0
- reconcile/test/test_acs_notifiers.py +0 -393
- reconcile/test/test_acs_policies.py +0 -497
- reconcile/test/test_acs_rbac.py +0 -865
- reconcile/test/test_aggregated_list.py +0 -237
- reconcile/test/test_amtool.py +0 -37
- reconcile/test/test_aws_ami_cleanup.py +0 -230
- reconcile/test/test_aws_ami_share.py +0 -68
- reconcile/test/test_aws_cloudwatch_log_retention.py +0 -434
- reconcile/test/test_aws_iam_keys.py +0 -70
- reconcile/test/test_aws_iam_password_reset.py +0 -35
- reconcile/test/test_aws_support_cases_sos.py +0 -23
- reconcile/test/test_checkpoint.py +0 -178
- reconcile/test/test_cli.py +0 -41
- reconcile/test/test_closedbox_endpoint_monitoring.py +0 -207
- reconcile/test/test_dashdotdb_dora.py +0 -245
- reconcile/test/test_database_access_manager.py +0 -660
- reconcile/test/test_deadmanssnitch.py +0 -290
- reconcile/test/test_gabi_authorized_users.py +0 -72
- reconcile/test/test_gcr_mirror.py +0 -14
- reconcile/test/test_github_org.py +0 -156
- reconcile/test/test_github_repo_invites.py +0 -119
- reconcile/test/test_gitlab_housekeeping.py +0 -333
- reconcile/test/test_gitlab_labeler.py +0 -126
- reconcile/test/test_gitlab_members.py +0 -219
- reconcile/test/test_gitlab_permissions.py +0 -164
- reconcile/test/test_instrumented_wrappers.py +0 -18
- reconcile/test/test_integrations_manager.py +0 -1252
- reconcile/test/test_jenkins_worker_fleets.py +0 -57
- reconcile/test/test_jira_permissions_validator.py +0 -519
- reconcile/test/test_jump_host.py +0 -114
- reconcile/test/test_ldap_users.py +0 -125
- reconcile/test/test_make.py +0 -28
- reconcile/test/test_ocm_additional_routers.py +0 -133
- reconcile/test/test_ocm_clusters.py +0 -798
- reconcile/test/test_ocm_clusters_manifest_updates.py +0 -87
- reconcile/test/test_ocm_machine_pools.py +0 -1103
- reconcile/test/test_ocm_update_recommended_version.py +0 -145
- reconcile/test/test_ocm_upgrade_scheduler_org_updater.py +0 -125
- reconcile/test/test_openshift_base.py +0 -1269
- reconcile/test/test_openshift_cluster_bots.py +0 -240
- reconcile/test/test_openshift_namespace_labels.py +0 -344
- reconcile/test/test_openshift_namespaces.py +0 -256
- reconcile/test/test_openshift_resource.py +0 -443
- reconcile/test/test_openshift_resources_base.py +0 -478
- reconcile/test/test_openshift_saas_deploy.py +0 -188
- reconcile/test/test_openshift_saas_deploy_change_tester.py +0 -308
- reconcile/test/test_openshift_saas_deploy_trigger_cleaner.py +0 -65
- reconcile/test/test_openshift_serviceaccount_tokens.py +0 -282
- reconcile/test/test_openshift_tekton_resources.py +0 -265
- reconcile/test/test_openshift_upgrade_watcher.py +0 -223
- reconcile/test/test_prometheus_rules_tester.py +0 -151
- reconcile/test/test_quay_membership.py +0 -86
- reconcile/test/test_quay_mirror.py +0 -172
- reconcile/test/test_quay_mirror_org.py +0 -82
- reconcile/test/test_quay_repos.py +0 -59
- reconcile/test/test_queries.py +0 -53
- reconcile/test/test_repo_owners.py +0 -47
- reconcile/test/test_requests_sender.py +0 -139
- reconcile/test/test_saasherder.py +0 -1611
- reconcile/test/test_saasherder_allowed_secret_paths.py +0 -125
- reconcile/test/test_secret_reader.py +0 -153
- reconcile/test/test_slack_base.py +0 -183
- reconcile/test/test_slack_usergroups.py +0 -785
- reconcile/test/test_sql_query.py +0 -316
- reconcile/test/test_status_board.py +0 -258
- reconcile/test/test_terraform_aws_route53.py +0 -29
- reconcile/test/test_terraform_cloudflare_dns.py +0 -117
- reconcile/test/test_terraform_cloudflare_resources.py +0 -408
- reconcile/test/test_terraform_cloudflare_users.py +0 -747
- reconcile/test/test_terraform_repo.py +0 -440
- reconcile/test/test_terraform_resources.py +0 -519
- reconcile/test/test_terraform_tgw_attachments.py +0 -1295
- reconcile/test/test_terraform_users.py +0 -152
- reconcile/test/test_terraform_vpc_peerings.py +0 -576
- reconcile/test/test_terraform_vpc_peerings_build_desired_state.py +0 -1434
- reconcile/test/test_three_way_diff_strategy.py +0 -131
- reconcile/test/test_utils_jinja2.py +0 -130
- reconcile/test/test_vault_replication.py +0 -534
- reconcile/test/test_vault_utils.py +0 -47
- reconcile/test/test_version_bump.py +0 -18
- reconcile/test/test_vpc_peerings_validator.py +0 -194
- reconcile/test/test_wrong_region.py +0 -78
- release/__init__.py +0 -0
- release/test_version.py +0 -50
- release/version.py +0 -104
- tools/cli_commands/test/__init__.py +0 -0
- tools/cli_commands/test/conftest.py +0 -332
- tools/cli_commands/test/test_aws_cost_report.py +0 -258
- tools/cli_commands/test/test_cost_management_api.py +0 -326
- tools/cli_commands/test/test_gpg_encrypt.py +0 -235
- tools/cli_commands/test/test_openshift_cost_optimization_report.py +0 -255
- tools/cli_commands/test/test_openshift_cost_report.py +0 -295
- tools/cli_commands/test/test_util.py +0 -70
- tools/test/__init__.py +0 -0
- tools/test/conftest.py +0 -77
- tools/test/test_app_interface_metrics_exporter.py +0 -48
- tools/test/test_erv2.py +0 -80
- tools/test/test_get_container_images.py +0 -230
- tools/test/test_qontract_cli.py +0 -197
- tools/test/test_saas_promotion_state.py +0 -187
- tools/test/test_sd_app_sre_alert_report.py +0 -74
- tools/test/test_sre_checkpoints.py +0 -79
@@ -1,74 +0,0 @@
|
|
1
|
-
from collections.abc import (
|
2
|
-
Callable,
|
3
|
-
Mapping,
|
4
|
-
)
|
5
|
-
|
6
|
-
from reconcile.saas_auto_promotions_manager.merge_request_manager.renderer import (
|
7
|
-
Renderer,
|
8
|
-
)
|
9
|
-
from reconcile.saas_auto_promotions_manager.subscriber import (
|
10
|
-
ConfigHash,
|
11
|
-
Subscriber,
|
12
|
-
)
|
13
|
-
|
14
|
-
|
15
|
-
def test_json_path_selector_include(
|
16
|
-
file_contents: Callable[[str], tuple[str, str]],
|
17
|
-
subscriber_builder: Callable[[Mapping], Subscriber],
|
18
|
-
):
|
19
|
-
subscriber = subscriber_builder({
|
20
|
-
"NAMESPACE": {
|
21
|
-
"path": "/some/namespace.yml",
|
22
|
-
"name": "test-namespace",
|
23
|
-
"cluster": {
|
24
|
-
"name": "test-cluster",
|
25
|
-
},
|
26
|
-
},
|
27
|
-
"DESIRED_REF": "new_sha",
|
28
|
-
"DESIRED_TARGET_HASHES": [
|
29
|
-
ConfigHash(
|
30
|
-
channel="channel-a",
|
31
|
-
target_config_hash="new_hash",
|
32
|
-
parent_saas="parent_saas",
|
33
|
-
)
|
34
|
-
],
|
35
|
-
"CHANNELS": {"channel-a": {}},
|
36
|
-
})
|
37
|
-
saas_content, expected = file_contents("json_path_selector_includes")
|
38
|
-
renderer = Renderer()
|
39
|
-
result = renderer.render_merge_request_content(
|
40
|
-
subscriber=subscriber,
|
41
|
-
current_content=saas_content,
|
42
|
-
)
|
43
|
-
assert result.strip() == expected.strip()
|
44
|
-
|
45
|
-
|
46
|
-
def test_json_path_selector_exclude(
|
47
|
-
file_contents: Callable[[str], tuple[str, str]],
|
48
|
-
subscriber_builder: Callable[[Mapping], Subscriber],
|
49
|
-
):
|
50
|
-
subscriber = subscriber_builder({
|
51
|
-
"NAMESPACE": {
|
52
|
-
"path": "/some/namespace.yml",
|
53
|
-
"name": "test-namespace",
|
54
|
-
"cluster": {
|
55
|
-
"name": "test-cluster",
|
56
|
-
},
|
57
|
-
},
|
58
|
-
"DESIRED_REF": "hyper_sha",
|
59
|
-
"DESIRED_TARGET_HASHES": [
|
60
|
-
ConfigHash(
|
61
|
-
channel="channel-a",
|
62
|
-
target_config_hash="hyper_hash",
|
63
|
-
parent_saas="parent_saas",
|
64
|
-
)
|
65
|
-
],
|
66
|
-
"CHANNELS": {"channel-a": {}},
|
67
|
-
})
|
68
|
-
saas_content, expected = file_contents("json_path_selector_excludes")
|
69
|
-
renderer = Renderer()
|
70
|
-
result = renderer.render_merge_request_content(
|
71
|
-
subscriber=subscriber,
|
72
|
-
current_content=saas_content,
|
73
|
-
)
|
74
|
-
assert result.strip() == expected.strip()
|
@@ -1,52 +0,0 @@
|
|
1
|
-
from unittest.mock import create_autospec
|
2
|
-
|
3
|
-
from reconcile.saas_auto_promotions_manager.integration import SaasAutoPromotionsManager
|
4
|
-
from reconcile.saas_auto_promotions_manager.merge_request_manager.batcher import (
|
5
|
-
Batcher,
|
6
|
-
)
|
7
|
-
from reconcile.saas_auto_promotions_manager.merge_request_manager.merge_request_manager_v2 import (
|
8
|
-
MergeRequestManagerV2,
|
9
|
-
)
|
10
|
-
from reconcile.saas_auto_promotions_manager.merge_request_manager.mr_parser import (
|
11
|
-
MRParser,
|
12
|
-
)
|
13
|
-
from reconcile.saas_auto_promotions_manager.merge_request_manager.renderer import (
|
14
|
-
Renderer,
|
15
|
-
)
|
16
|
-
from reconcile.saas_auto_promotions_manager.s3_exporter import S3Exporter
|
17
|
-
from reconcile.saas_auto_promotions_manager.utils.saas_files_inventory import (
|
18
|
-
SaasFilesInventory,
|
19
|
-
)
|
20
|
-
from reconcile.utils.promotion_state import (
|
21
|
-
PromotionState,
|
22
|
-
)
|
23
|
-
from reconcile.utils.vcs import VCS
|
24
|
-
|
25
|
-
|
26
|
-
def test_integration_test():
|
27
|
-
"""
|
28
|
-
Have all the parts glued together and have one full run.
|
29
|
-
This is too complex to setup and properly maintain.
|
30
|
-
However, it is a good single test to see if
|
31
|
-
all components are wired properly.
|
32
|
-
"""
|
33
|
-
vcs = create_autospec(spec=VCS)
|
34
|
-
merge_request_manager_v2 = MergeRequestManagerV2(
|
35
|
-
vcs=vcs,
|
36
|
-
reconciler=create_autospec(spec=Batcher),
|
37
|
-
mr_parser=create_autospec(spec=MRParser),
|
38
|
-
renderer=create_autospec(spec=Renderer),
|
39
|
-
)
|
40
|
-
manager = SaasAutoPromotionsManager(
|
41
|
-
deployment_state=create_autospec(spec=PromotionState),
|
42
|
-
s3_exporter=create_autospec(spec=S3Exporter),
|
43
|
-
saas_file_inventory=SaasFilesInventory(saas_files=[]),
|
44
|
-
vcs=vcs,
|
45
|
-
merge_request_manager_v2=merge_request_manager_v2,
|
46
|
-
thread_pool_size=1,
|
47
|
-
dry_run=False,
|
48
|
-
)
|
49
|
-
manager.reconcile()
|
50
|
-
|
51
|
-
vcs.close_app_interface_mr.assert_not_called()
|
52
|
-
vcs.open_app_interface_merge_request.assert_not_called()
|
File without changes
|
@@ -1,393 +0,0 @@
|
|
1
|
-
import copy
|
2
|
-
from typing import Any
|
3
|
-
|
4
|
-
import pytest
|
5
|
-
from pytest_mock import MockerFixture
|
6
|
-
|
7
|
-
from reconcile.acs_notifiers import AcsNotifiersIntegration
|
8
|
-
from reconcile.gql_definitions.acs.acs_policies import (
|
9
|
-
AcsPolicyIntegrationNotifierJiraV1,
|
10
|
-
AcsPolicyIntegrationNotifiersV1,
|
11
|
-
AcsPolicyIntegrationsV1,
|
12
|
-
AcsPolicyScopeClusterV1,
|
13
|
-
AcsPolicyScopeNamespaceV1,
|
14
|
-
AcsPolicyV1,
|
15
|
-
AppEscalationPolicyChannelsV1,
|
16
|
-
AppEscalationPolicyV1,
|
17
|
-
DisableJiraBoardAutomationsV1,
|
18
|
-
JiraBoardV1,
|
19
|
-
JiraServerV1,
|
20
|
-
JiraSeverityPriorityMappingsV1,
|
21
|
-
SeverityPriorityMappingV1,
|
22
|
-
)
|
23
|
-
from reconcile.utils.acs.notifiers import (
|
24
|
-
AcsNotifiersApi,
|
25
|
-
JiraCredentials,
|
26
|
-
JiraNotifier,
|
27
|
-
SeverityPriorityMapping,
|
28
|
-
)
|
29
|
-
|
30
|
-
|
31
|
-
@pytest.fixture
|
32
|
-
def severity_priority_mapping() -> SeverityPriorityMapping:
|
33
|
-
return SeverityPriorityMapping(severity="critical", priority="Critical")
|
34
|
-
|
35
|
-
|
36
|
-
@pytest.fixture
|
37
|
-
def severity_priority_mapping_api_payload() -> dict[str, str]:
|
38
|
-
return {
|
39
|
-
"severity": "CRITICAL_SEVERITY",
|
40
|
-
"priorityName": "Critical",
|
41
|
-
}
|
42
|
-
|
43
|
-
|
44
|
-
def test_severity_priority_mappings_to_api(
|
45
|
-
severity_priority_mapping: SeverityPriorityMapping,
|
46
|
-
severity_priority_mapping_api_payload: dict[str, str],
|
47
|
-
) -> None:
|
48
|
-
assert severity_priority_mapping.to_api() == severity_priority_mapping_api_payload
|
49
|
-
|
50
|
-
|
51
|
-
def test_severity_priority_mappings_from_api(
|
52
|
-
severity_priority_mapping: SeverityPriorityMapping,
|
53
|
-
severity_priority_mapping_api_payload: dict[str, str],
|
54
|
-
) -> None:
|
55
|
-
assert (
|
56
|
-
SeverityPriorityMapping.from_api(severity_priority_mapping_api_payload)
|
57
|
-
== severity_priority_mapping
|
58
|
-
)
|
59
|
-
|
60
|
-
|
61
|
-
@pytest.fixture
|
62
|
-
def jira_credentials() -> JiraCredentials:
|
63
|
-
return JiraCredentials(
|
64
|
-
url="https://jira.example.com",
|
65
|
-
username="jirabot",
|
66
|
-
token="topsecret",
|
67
|
-
)
|
68
|
-
|
69
|
-
|
70
|
-
@pytest.fixture
|
71
|
-
def jira_notifier(
|
72
|
-
severity_priority_mapping: SeverityPriorityMapping,
|
73
|
-
jira_credentials: JiraCredentials,
|
74
|
-
) -> JiraNotifier:
|
75
|
-
return JiraNotifier(
|
76
|
-
name="jira-notifier-1",
|
77
|
-
board="JIRAPLAY",
|
78
|
-
url=jira_credentials.url,
|
79
|
-
issue_type="Task",
|
80
|
-
severity_priority_mappings=[severity_priority_mapping],
|
81
|
-
custom_fields={"security": {"id": "0"}},
|
82
|
-
)
|
83
|
-
|
84
|
-
|
85
|
-
@pytest.fixture
|
86
|
-
def jira_notifier_api_payload(
|
87
|
-
severity_priority_mapping: SeverityPriorityMapping,
|
88
|
-
jira_credentials: JiraCredentials,
|
89
|
-
) -> dict[str, Any]:
|
90
|
-
return {
|
91
|
-
"name": "jira-notifier-1",
|
92
|
-
"type": "jira",
|
93
|
-
"uiEndpoint": "https://acs.example.com",
|
94
|
-
"labelDefault": "JIRAPLAY",
|
95
|
-
"jira": {
|
96
|
-
"url": jira_credentials.url,
|
97
|
-
"username": jira_credentials.username,
|
98
|
-
"password": jira_credentials.token,
|
99
|
-
"issueType": "Task",
|
100
|
-
"priorityMappings": [severity_priority_mapping.to_api()],
|
101
|
-
"defaultFieldsJson": '{"security": {"id": "0"}}',
|
102
|
-
},
|
103
|
-
}
|
104
|
-
|
105
|
-
|
106
|
-
def test_jira_notifier_to_api(
|
107
|
-
jira_notifier: JiraNotifier,
|
108
|
-
jira_credentials: JiraCredentials,
|
109
|
-
jira_notifier_api_payload: dict[str, Any],
|
110
|
-
) -> None:
|
111
|
-
assert (
|
112
|
-
jira_notifier.to_api(
|
113
|
-
ui_endpoint="https://acs.example.com", jira_credentials=jira_credentials
|
114
|
-
)
|
115
|
-
== jira_notifier_api_payload
|
116
|
-
)
|
117
|
-
|
118
|
-
|
119
|
-
@pytest.fixture
|
120
|
-
def acs_notifier_api() -> AcsNotifiersApi:
|
121
|
-
return AcsNotifiersApi(
|
122
|
-
url="https://acs.example.com",
|
123
|
-
token="topsecret",
|
124
|
-
)
|
125
|
-
|
126
|
-
|
127
|
-
@pytest.fixture
|
128
|
-
def acs_notifier_api_notifiers_api_payload(
|
129
|
-
jira_notifier: JiraNotifier,
|
130
|
-
jira_credentials: JiraCredentials,
|
131
|
-
) -> list[Any]:
|
132
|
-
return [
|
133
|
-
jira_notifier.to_api(
|
134
|
-
ui_endpoint="https://acs.example.com", jira_credentials=jira_credentials
|
135
|
-
)
|
136
|
-
]
|
137
|
-
|
138
|
-
|
139
|
-
def test_acs_notifier_api_get_notifiers(
|
140
|
-
mocker: MockerFixture,
|
141
|
-
acs_notifier_api_notifiers_api_payload: list[Any],
|
142
|
-
acs_notifier_api: AcsNotifiersApi,
|
143
|
-
) -> None:
|
144
|
-
generic_request_mock = mocker.patch(
|
145
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.generic_request_json"
|
146
|
-
)
|
147
|
-
generic_request_mock.return_value = {
|
148
|
-
"notifiers": acs_notifier_api_notifiers_api_payload
|
149
|
-
}
|
150
|
-
|
151
|
-
assert acs_notifier_api.get_notifiers() == acs_notifier_api_notifiers_api_payload
|
152
|
-
generic_request_mock.assert_called_once_with("/v1/notifiers", "GET")
|
153
|
-
|
154
|
-
|
155
|
-
def test_acs_notifier_api_get_jira_notifiers(
|
156
|
-
mocker: MockerFixture,
|
157
|
-
acs_notifier_api_notifiers_api_payload: list[Any],
|
158
|
-
acs_notifier_api: AcsNotifiersApi,
|
159
|
-
jira_notifier: JiraNotifier,
|
160
|
-
) -> None:
|
161
|
-
get_notifiers_mock = mocker.patch(
|
162
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.get_notifiers"
|
163
|
-
)
|
164
|
-
get_notifiers_mock.return_value = acs_notifier_api_notifiers_api_payload
|
165
|
-
|
166
|
-
assert acs_notifier_api.get_jira_notifiers() == [jira_notifier]
|
167
|
-
|
168
|
-
|
169
|
-
def test_get_notifier_id_by_name(
|
170
|
-
mocker: MockerFixture,
|
171
|
-
acs_notifier_api_notifiers_api_payload: list[Any],
|
172
|
-
acs_notifier_api: AcsNotifiersApi,
|
173
|
-
) -> None:
|
174
|
-
get_notifiers_mock = mocker.patch(
|
175
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.get_notifiers"
|
176
|
-
)
|
177
|
-
get_notifiers_mock.return_value = acs_notifier_api_notifiers_api_payload
|
178
|
-
acs_notifier_api_notifiers_api_payload[0]["id"] = "jira-notifier-id-1"
|
179
|
-
|
180
|
-
assert (
|
181
|
-
acs_notifier_api.get_notifier_id_by_name("jira-notifier-1")
|
182
|
-
== "jira-notifier-id-1"
|
183
|
-
)
|
184
|
-
get_notifiers_mock.assert_called_once()
|
185
|
-
|
186
|
-
|
187
|
-
def test_update_jira_notifier(
|
188
|
-
mocker: MockerFixture,
|
189
|
-
acs_notifier_api: AcsNotifiersApi,
|
190
|
-
jira_notifier: JiraNotifier,
|
191
|
-
jira_credentials: JiraCredentials,
|
192
|
-
) -> None:
|
193
|
-
get_notifier_id_by_name_mock = mocker.patch(
|
194
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.get_notifier_id_by_name"
|
195
|
-
)
|
196
|
-
get_notifier_id_by_name_mock.return_value = "jira-notifier-id-1"
|
197
|
-
generic_request_mock = mocker.patch(
|
198
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.generic_request"
|
199
|
-
)
|
200
|
-
|
201
|
-
acs_notifier_api.update_jira_notifier(jira_notifier, jira_credentials)
|
202
|
-
get_notifier_id_by_name_mock.assert_called_once_with(jira_notifier.name)
|
203
|
-
body = jira_notifier.to_api(acs_notifier_api.url, jira_credentials)
|
204
|
-
generic_request_mock.assert_called_once_with(
|
205
|
-
"/v1/notifiers/jira-notifier-id-1", "PUT", body
|
206
|
-
)
|
207
|
-
|
208
|
-
|
209
|
-
def test_create_jira_notifier(
|
210
|
-
mocker: MockerFixture,
|
211
|
-
acs_notifier_api: AcsNotifiersApi,
|
212
|
-
jira_notifier: JiraNotifier,
|
213
|
-
jira_credentials: JiraCredentials,
|
214
|
-
) -> None:
|
215
|
-
generic_request_mock = mocker.patch(
|
216
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.generic_request"
|
217
|
-
)
|
218
|
-
acs_notifier_api.create_jira_notifier(jira_notifier, jira_credentials)
|
219
|
-
body = jira_notifier.to_api(acs_notifier_api.url, jira_credentials)
|
220
|
-
generic_request_mock.assert_called_once_with("/v1/notifiers", "POST", body)
|
221
|
-
|
222
|
-
|
223
|
-
def test_delete_jira_notifier(
|
224
|
-
mocker: MockerFixture,
|
225
|
-
acs_notifier_api: AcsNotifiersApi,
|
226
|
-
jira_notifier: JiraNotifier,
|
227
|
-
) -> None:
|
228
|
-
get_notifier_id_by_name_mock = mocker.patch(
|
229
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.get_notifier_id_by_name"
|
230
|
-
)
|
231
|
-
get_notifier_id_by_name_mock.return_value = "jira-notifier-id-1"
|
232
|
-
generic_request_mock = mocker.patch(
|
233
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.generic_request"
|
234
|
-
)
|
235
|
-
acs_notifier_api.delete_jira_notifier(jira_notifier)
|
236
|
-
get_notifier_id_by_name_mock.assert_called_once_with(jira_notifier.name)
|
237
|
-
generic_request_mock.assert_called_once_with(
|
238
|
-
"/v1/notifiers/jira-notifier-id-1", "DELETE"
|
239
|
-
)
|
240
|
-
|
241
|
-
|
242
|
-
@pytest.fixture
|
243
|
-
def acs_notifier_integration() -> AcsNotifiersIntegration:
|
244
|
-
return AcsNotifiersIntegration()
|
245
|
-
|
246
|
-
|
247
|
-
@pytest.fixture
|
248
|
-
def escalation_policy() -> AppEscalationPolicyV1:
|
249
|
-
return AppEscalationPolicyV1(
|
250
|
-
name="notifier-1",
|
251
|
-
channels=AppEscalationPolicyChannelsV1(
|
252
|
-
jiraBoard=[
|
253
|
-
JiraBoardV1(
|
254
|
-
name="JIRAPLAY",
|
255
|
-
server=JiraServerV1(
|
256
|
-
serverUrl="https://jira.example.com",
|
257
|
-
),
|
258
|
-
severityPriorityMappings=JiraSeverityPriorityMappingsV1(
|
259
|
-
name="sp",
|
260
|
-
mappings=[
|
261
|
-
SeverityPriorityMappingV1(
|
262
|
-
severity="critical", priority="Critical"
|
263
|
-
)
|
264
|
-
],
|
265
|
-
),
|
266
|
-
issueType="Task",
|
267
|
-
issueSecurityId="0",
|
268
|
-
disable=DisableJiraBoardAutomationsV1(integrations=[]),
|
269
|
-
)
|
270
|
-
],
|
271
|
-
jiraComponent="",
|
272
|
-
jiraLabels=[],
|
273
|
-
),
|
274
|
-
)
|
275
|
-
|
276
|
-
|
277
|
-
@pytest.fixture
|
278
|
-
def acs_policies(
|
279
|
-
escalation_policy: AppEscalationPolicyV1,
|
280
|
-
) -> list[AcsPolicyV1]:
|
281
|
-
return [
|
282
|
-
AcsPolicyV1(
|
283
|
-
name="acs-policy-1",
|
284
|
-
description="CVEs within app-sre clusters with CVSS score gte to 7 and fixable",
|
285
|
-
severity="high",
|
286
|
-
integrations=AcsPolicyIntegrationsV1(
|
287
|
-
notifiers=AcsPolicyIntegrationNotifiersV1(
|
288
|
-
jira=AcsPolicyIntegrationNotifierJiraV1(
|
289
|
-
escalationPolicy=escalation_policy,
|
290
|
-
),
|
291
|
-
),
|
292
|
-
),
|
293
|
-
categories=["vulnerability-management"],
|
294
|
-
scope=AcsPolicyScopeClusterV1(
|
295
|
-
level="cluster",
|
296
|
-
clusters=[],
|
297
|
-
),
|
298
|
-
conditions=[],
|
299
|
-
),
|
300
|
-
AcsPolicyV1(
|
301
|
-
name="acs-policy-2",
|
302
|
-
description="image security policy violations of critical severity within app-sre namespaces",
|
303
|
-
severity="critical",
|
304
|
-
integrations=AcsPolicyIntegrationsV1(
|
305
|
-
notifiers=AcsPolicyIntegrationNotifiersV1(
|
306
|
-
jira=AcsPolicyIntegrationNotifierJiraV1(
|
307
|
-
escalationPolicy=escalation_policy,
|
308
|
-
),
|
309
|
-
),
|
310
|
-
),
|
311
|
-
categories=["vulnerability-management", "devops-best-practices"],
|
312
|
-
scope=AcsPolicyScopeNamespaceV1(
|
313
|
-
level="namespace",
|
314
|
-
namespaces=[],
|
315
|
-
),
|
316
|
-
conditions=[],
|
317
|
-
),
|
318
|
-
]
|
319
|
-
|
320
|
-
|
321
|
-
def test_integration_get_escalation_policies(
|
322
|
-
acs_notifier_integration: AcsNotifiersIntegration,
|
323
|
-
acs_policies: list[AcsPolicyV1],
|
324
|
-
escalation_policy: AppEscalationPolicyV1,
|
325
|
-
) -> None:
|
326
|
-
result = acs_notifier_integration._get_escalation_policies(acs_policies)
|
327
|
-
|
328
|
-
assert len(acs_policies) > 1
|
329
|
-
assert len(result) == 1
|
330
|
-
assert result[0] == escalation_policy
|
331
|
-
|
332
|
-
|
333
|
-
def test_build_jira_notifier_from_ecalation_policy(
|
334
|
-
escalation_policy: AppEscalationPolicyV1,
|
335
|
-
jira_notifier: JiraNotifier,
|
336
|
-
) -> None:
|
337
|
-
assert JiraNotifier.from_escalation_policy(escalation_policy) == jira_notifier
|
338
|
-
|
339
|
-
|
340
|
-
def test_get_desired_state(
|
341
|
-
acs_notifier_integration: AcsNotifiersIntegration,
|
342
|
-
acs_policies: list[AcsPolicyV1],
|
343
|
-
jira_notifier: JiraNotifier,
|
344
|
-
) -> None:
|
345
|
-
assert acs_notifier_integration.get_desired_state(acs_policies) == [jira_notifier]
|
346
|
-
|
347
|
-
|
348
|
-
def test_reconcile(
|
349
|
-
mocker: MockerFixture,
|
350
|
-
acs_notifier_integration: AcsNotifiersIntegration,
|
351
|
-
acs_notifier_api: AcsNotifiersApi,
|
352
|
-
jira_credentials: JiraCredentials,
|
353
|
-
jira_notifier: JiraNotifier,
|
354
|
-
) -> None:
|
355
|
-
notifier_to_add = copy.deepcopy(jira_notifier)
|
356
|
-
notifier_to_add.name = "jira-notifier-to-add"
|
357
|
-
notifier_to_update_current = copy.deepcopy(jira_notifier)
|
358
|
-
notifier_to_update_current.name = "jira-notifier-to-update"
|
359
|
-
notifier_to_update_current.issue_type = "Task"
|
360
|
-
notifier_to_update_desired = copy.deepcopy(jira_notifier)
|
361
|
-
notifier_to_update_desired.name = "jira-notifier-to-update"
|
362
|
-
notifier_to_update_current.issue_type = "Bug"
|
363
|
-
notifier_to_delete = copy.deepcopy(jira_notifier)
|
364
|
-
notifier_to_delete.name = "jira-notifier-to-delete"
|
365
|
-
|
366
|
-
current_state = [notifier_to_delete, notifier_to_update_current]
|
367
|
-
desired_state = [notifier_to_add, notifier_to_update_desired]
|
368
|
-
|
369
|
-
create_jira_notifier_mock = mocker.patch(
|
370
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.create_jira_notifier"
|
371
|
-
)
|
372
|
-
update_jira_notifier_mock = mocker.patch(
|
373
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.update_jira_notifier"
|
374
|
-
)
|
375
|
-
|
376
|
-
delete_jira_notifier_mock = mocker.patch(
|
377
|
-
"reconcile.utils.acs.notifiers.AcsNotifiersApi.delete_jira_notifier"
|
378
|
-
)
|
379
|
-
acs_notifier_integration.reconcile(
|
380
|
-
current_state,
|
381
|
-
desired_state,
|
382
|
-
acs_notifier_api,
|
383
|
-
{jira_credentials.url: jira_credentials},
|
384
|
-
dry_run=False,
|
385
|
-
)
|
386
|
-
|
387
|
-
create_jira_notifier_mock.assert_called_once_with(
|
388
|
-
notifier_to_add, jira_credentials=jira_credentials
|
389
|
-
)
|
390
|
-
update_jira_notifier_mock.assert_called_once_with(
|
391
|
-
notifier_to_update_desired, jira_credentials=jira_credentials
|
392
|
-
)
|
393
|
-
delete_jira_notifier_mock.assert_called_once_with(notifier_to_delete)
|