mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-12-24 15:38:06 +00:00
3aa41db166
* starts fixes #353 * new approach to minize duplications * applied merged yaml files for v1.11 and v1.13 * yaml files json/params merged * fixes to remove double quotes from numbers and booleans * fixed bug * fixed certificate check * removed -json files * changes based on PR review * Update check/check_test.go Yay more tests! Co-Authored-By: Liz Rice <liz@lizrice.com> * changes as PR review * fixed bug when scored check is missing tests * attempt to improve the code * fixed list breaks * removes handleError function * Update check/check.go Accepting suggested log level. Co-Authored-By: Liz Rice <liz@lizrice.com>
96 lines
2.1 KiB
Go
96 lines
2.1 KiB
Go
// Copyright © 2017-2019 Aqua Security Software Ltd. <info@aquasec.com>
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package check
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
func TestCheck_Run(t *testing.T) {
|
|
type TestCase struct {
|
|
check Check
|
|
Expected State
|
|
}
|
|
|
|
testCases := []TestCase{
|
|
{check: Check{Type: MANUAL}, Expected: WARN},
|
|
{check: Check{Type: "skip"}, Expected: INFO},
|
|
{check: Check{Type: "", Scored: false}, Expected: WARN}, // Not scored checks with no type should be marked warn
|
|
{check: Check{Type: "", Scored: true}, Expected: WARN}, // If there are no tests in the check, warn
|
|
{check: Check{Type: MANUAL, Scored: false}, Expected: WARN},
|
|
{check: Check{Type: "skip", Scored: false}, Expected: INFO},
|
|
}
|
|
for _, testCase := range testCases {
|
|
|
|
testCase.check.run()
|
|
|
|
if testCase.check.State != testCase.Expected {
|
|
t.Errorf("test failed, expected %s, actual %s\n", testCase.Expected, testCase.check.State)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestCheckAuditConfig(t *testing.T) {
|
|
|
|
cases := []struct {
|
|
*Check
|
|
expected State
|
|
}{
|
|
{
|
|
controls.Groups[1].Checks[0],
|
|
"PASS",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[1],
|
|
"FAIL",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[2],
|
|
"FAIL",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[3],
|
|
"PASS",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[4],
|
|
"FAIL",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[5],
|
|
"PASS",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[6],
|
|
"FAIL",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[7],
|
|
"PASS",
|
|
},
|
|
{
|
|
controls.Groups[1].Checks[8],
|
|
"FAIL",
|
|
},
|
|
}
|
|
|
|
for _, c := range cases {
|
|
c.run()
|
|
if c.State != c.expected {
|
|
t.Errorf("%s, expected:%v, got:%v\n", c.Text, c.expected, c.State)
|
|
}
|
|
}
|
|
}
|