prole/tests/etc/test_init_kdc_k3s_registry_default.sh
chrisfu d397b3000e Fix installer ctx apply flow and registry namespace
- Add explicit Apply button for kubectl context switching to avoid half-applied changes

- Allow kubeconfig/context-based auth without requiring K3S_TOKEN when kubeconfig is valid

- Prompt cleanup/reset of previous Common Core services namespace to prevent resource collisions

- Remove hardcoded 'common-services' registry namespace; default registry deploy/check to SERVICE_NAMESPACE/REGISTRY_NAMESPACE

- Update mocks and add regression tests for namespace resolution and installer behavior
2026-03-07 10:35:27 -08:00

156 lines
3.4 KiB
Bash

#!/usr/bin/env bash
# Regression test: etc/init_kdc.sh should treat local registry as enabled by default in k3s mode
# (matching etc/prole_cfg.sh defaults), so it must not fail with “No registry host configured for k3s”.
set -euo pipefail
SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
PROLE_HOME=$(cd "$SCRIPT_DIR/../.." && pwd)
SOURCE_ETC_DIR="$PROLE_HOME/etc"
TMP_DIR=$(mktemp -d)
trap 'rm -rf "$TMP_DIR"' EXIT
WORK_DIR="$TMP_DIR/work"
BIN_DIR="$TMP_DIR/bin"
mkdir -p "$WORK_DIR/etc" "$WORK_DIR/conf" "$WORK_DIR/authority" "$BIN_DIR"
cp "$SOURCE_ETC_DIR/init_kdc.sh" "$WORK_DIR/etc/init_kdc.sh"
cp "$SOURCE_ETC_DIR/prole_cfg.sh" "$WORK_DIR/etc/prole_cfg.sh"
chmod +x "$WORK_DIR/etc/init_kdc.sh"
cat <<EOF > "$WORK_DIR/env.sh"
#!/usr/bin/env bash
export PROLE_HOME="$WORK_DIR"
export PROLE_CONF="$WORK_DIR/conf"
EOF
cat <<EOF > "$WORK_DIR/conf/prole.cfg"
[globals]
prole.home = $WORK_DIR
prole.mode = k3s
NAMESPACE = prole-db-a0001
EOF
export KUBECTL_LOG="$TMP_DIR/kubectl.log"
export DOCKER_LOG="$TMP_DIR/docker.log"
cat <<'EOF' > "$BIN_DIR/kubectl"
#!/usr/bin/env bash
set -euo pipefail
args=("$@")
printf '%s\n' "${args[*]}" >> "${KUBECTL_LOG}"
sub="${1:-}"
case "$sub" in
config)
case "${2:-}" in
current-context)
printf '%s' "docker-desktop"
exit 0
;;
use-context|get-contexts)
exit 0
;;
esac
exit 0
;;
get)
# For namespace existence checks, succeed.
if [[ "${2:-}" == "namespace" ]]; then
exit 0
fi
# For deployment checks, report missing to exercise the deploy-time timeout path.
if [[ "${2:-}" == "deploy" || "${2:-}" == "deployment" ]]; then
exit 1
fi
exit 0
;;
create)
# init_kdc.sh pipes YAML from create-secret into kubectl apply.
if [[ "${2:-}" == "secret" ]]; then
cat <<YAML
apiVersion: v1
kind: Secret
metadata:
name: dummy
YAML
exit 0
fi
if [[ "${2:-}" == "namespace" ]]; then
exit 0
fi
exit 0
;;
apply)
cat >/dev/null || true
exit 0
;;
rollout|wait|exec|delete|describe|logs|patch)
exit 0
;;
*)
exit 0
;;
esac
EOF
chmod +x "$BIN_DIR/kubectl"
cat <<'EOF' > "$BIN_DIR/docker"
#!/usr/bin/env bash
set -euo pipefail
args=("$@")
printf '%s\n' "${args[*]}" >> "${DOCKER_LOG}"
case "${1:-}" in
info|build|tag|push)
exit 0
;;
esac
exit 0
EOF
chmod +x "$BIN_DIR/docker"
export PATH="$BIN_DIR:$PATH"
export PROLE_HOME="$WORK_DIR"
export PROLE_CONF="$WORK_DIR/conf"
export PROLE_MODE="k3s"
# Avoid secret generation paths (python/openssl) by providing explicit values.
export PROLE_KDC_ADMIN_PASSWORD="test-admin"
export PROLE_KDC_MASTER_PASSWORD="test-master"
export PROLE_KDC_TRUST_PASSWORD="test-trust"
export PROLE_KDC_TRUST_SHARED_PASSWORD="test-shared"
if "$WORK_DIR/etc/init_kdc.sh" update >"$TMP_DIR/stdout" 2>"$TMP_DIR/stderr"; then
:
else
echo "FAILURE: init_kdc.sh update exited non-zero"
cat "$TMP_DIR/stderr"
exit 1
fi
if grep -q "No registry host configured for k3s" "$TMP_DIR/stderr"; then
echo "FAILURE: unexpected missing-registry-host error for k3s mode"
cat "$TMP_DIR/stderr"
exit 1
fi
if ! grep -q "push" "$DOCKER_LOG"; then
echo "FAILURE: expected docker push to be attempted"
cat "$DOCKER_LOG"
exit 1
fi
if ! grep -q "push localhost:5000/prole-authority:latest" "$DOCKER_LOG"; then
echo "FAILURE: expected docker push to default localhost registry in k3s mode"
cat "$DOCKER_LOG"
exit 1
fi
echo "SUCCESS"