mirror of
https://github.com/goharbor/harbor.git
synced 2024-09-14 23:17:46 +02:00
7fb9dbd0fa
1. Fix E2E quotas issue, push the same image but with different name; 2. Add checkpoint for robot account test; 3. Upgraded docker and containerd in E2E image; 4. Package base image sample(busybox) into E2E image, so in E2E container, all local docker images can be cleaned up, once base image is needed for building image, it can be loaded locally; 5. Adapt OIDC service of supporting LDAP user, and add OIDC group user test; 6. Restart docker deamon before content trust test, both in API and UI test; 7. Add retry for keyword "Add A Tag Immutability Rule"; 8. Fix tag retention test issue, missing click angle icon, and enhance checkpoint of dry run and real run; 9. Fix schedule test issue for wrong cron string; 10. Disable quotas verification, it's not stable for script defect; Signed-off-by: danfengliu <danfengl@vmware.com>
86 lines
4.0 KiB
Python
86 lines
4.0 KiB
Python
from __future__ import absolute_import
|
|
|
|
import unittest
|
|
|
|
from testutils import ADMIN_CLIENT, suppress_urllib3_warning
|
|
from testutils import harbor_server
|
|
from testutils import TEARDOWN
|
|
from library.artifact import Artifact
|
|
from library.project import Project
|
|
from library.user import User
|
|
from library.repository import Repository
|
|
from library.repository import push_self_build_image_to_project
|
|
from library.repository import pull_harbor_image
|
|
from library.docker_api import docker_image_clean_all
|
|
class TestProjects(unittest.TestCase):
|
|
@suppress_urllib3_warning
|
|
def setUp(self):
|
|
self.project= Project()
|
|
self.user= User()
|
|
self.artifact= Artifact()
|
|
self.repo= Repository()
|
|
|
|
@unittest.skipIf(TEARDOWN == True, "Test data won't be erased.")
|
|
def tearDown(self):
|
|
#1. Delete repository(RA) by user(UA);
|
|
self.repo.delete_repository(TestProjects.project_content_trust_name, TestProjects.repo_name.split('/')[1], **TestProjects.USER_CONTENT_TRUST_CLIENT)
|
|
|
|
#2. Delete project(PA);
|
|
self.project.delete_project(TestProjects.project_content_trust_id, **TestProjects.USER_CONTENT_TRUST_CLIENT)
|
|
|
|
#3. Delete user(UA);
|
|
self.user.delete_user(TestProjects.user_content_trust_id, **ADMIN_CLIENT)
|
|
|
|
def testProjectLevelPolicyContentTrust(self):
|
|
"""
|
|
Test case:
|
|
Project Level Policy Content Trust
|
|
Test step and expected result:
|
|
1. Create a new user(UA);
|
|
2. Create a new project(PA) by user(UA);
|
|
3. Push a new image(IA) in project(PA) by admin;
|
|
4. Image(IA) should exist;
|
|
5. Pull image(IA) successfully;
|
|
6. Enable content trust in project(PA) configuration;
|
|
7. Pull image(IA) failed and the reason is "The image is not signed in Notary".
|
|
Tear down:
|
|
1. Delete repository(RA) by user(UA);
|
|
2. Delete project(PA);
|
|
3. Delete user(UA);
|
|
"""
|
|
url = ADMIN_CLIENT["endpoint"]
|
|
image = "test_content_trust"
|
|
user_content_trust_password = "Aa123456"
|
|
|
|
#1. Create a new user(UA);
|
|
TestProjects.user_content_trust_id, user_content_trust_name = self.user.create_user(user_password = user_content_trust_password, **ADMIN_CLIENT)
|
|
|
|
TestProjects.USER_CONTENT_TRUST_CLIENT=dict(endpoint = url, username = user_content_trust_name, password = user_content_trust_password)
|
|
|
|
#2. Create a new project(PA) by user(UA);
|
|
TestProjects.project_content_trust_id, TestProjects.project_content_trust_name = self.project.create_project(metadata = {"public": "false"}, **TestProjects.USER_CONTENT_TRUST_CLIENT)
|
|
|
|
#3. Push a new image(IA) in project(PA) by admin;
|
|
TestProjects.repo_name, tag = push_self_build_image_to_project(TestProjects.project_content_trust_name, harbor_server, ADMIN_CLIENT["username"], ADMIN_CLIENT["password"], image, "latest")
|
|
|
|
#4. Image(IA) should exist;
|
|
artifact = self.artifact.get_reference_info(TestProjects.project_content_trust_name, image, tag, **TestProjects.USER_CONTENT_TRUST_CLIENT)
|
|
self.assertEqual(artifact.tags[0].name, tag)
|
|
|
|
docker_image_clean_all()
|
|
#5. Pull image(IA) successfully;
|
|
pull_harbor_image(harbor_server, ADMIN_CLIENT["username"], ADMIN_CLIENT["password"], TestProjects.repo_name, tag)
|
|
|
|
self.project.get_project(TestProjects.project_content_trust_id)
|
|
#6. Enable content trust in project(PA) configuration;
|
|
self.project.update_project(TestProjects.project_content_trust_id, metadata = {"enable_content_trust": "true"}, **TestProjects.USER_CONTENT_TRUST_CLIENT)
|
|
self.project.get_project(TestProjects.project_content_trust_id)
|
|
|
|
#7. Pull image(IA) failed and the reason is "The image is not signed in Notary".
|
|
docker_image_clean_all()
|
|
pull_harbor_image(harbor_server, ADMIN_CLIENT["username"], ADMIN_CLIENT["password"], TestProjects.repo_name, tag, expected_error_message = "The image is not signed in Notary")
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main()
|
|
|