pkg/kube/translation/annotations/iprestriction_test.go

// Licensed to the Apache Software Foundation (ASF) under one or more
// contributor license agreements.  See the NOTICE file distributed with
// this work for additional information regarding copyright ownership.
// The ASF licenses this file to You under the Apache License, Version 2.0
// (the "License"); you may not use this file except in compliance with
// the License.  You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package annotations

import (
	"testing"

	"github.com/stretchr/testify/assert"

	apisixv1 "github.com/apache/apisix-ingress-controller/pkg/types/apisix/v1"
)

func TestIPRestrictionHandler(t *testing.T) {
	annotations := map[string]string{
		_allowlistSourceRange: "10.2.2.2,192.168.0.0/16",
	}
	p := NewIPRestrictionHandler()
	out, err := p.Handle(NewExtractor(annotations))
	assert.Nil(t, err, "checking given error")
	config := out.(*apisixv1.IPRestrictConfig)
	assert.Len(t, config.Allowlist, 2, "checking size of white list")
	assert.Equal(t, "10.2.2.2", config.Allowlist[0])
	assert.Equal(t, "192.168.0.0/16", config.Allowlist[1])
	assert.Equal(t, "ip-restriction", p.PluginName())

	annotations[_blocklistSourceRange] = "172.17.0.0/16,127.0.0.1"
	out, err = p.Handle(NewExtractor(annotations))
	assert.Nil(t, err, "checking given error")
	config = out.(*apisixv1.IPRestrictConfig)
	assert.Len(t, config.Allowlist, 2, "checking size of white list")
	assert.Equal(t, "10.2.2.2", config.Allowlist[0])
	assert.Equal(t, "192.168.0.0/16", config.Allowlist[1])
	assert.Len(t, config.Blocklist, 2, "checking size of black list")
	assert.Equal(t, "172.17.0.0/16", config.Blocklist[0])
	assert.Equal(t, "127.0.0.1", config.Blocklist[1])

	delete(annotations, _allowlistSourceRange)
	delete(annotations, _blocklistSourceRange)
	out, err = p.Handle(NewExtractor(annotations))
	assert.Nil(t, err, "checking given error")
	assert.Nil(t, out, "checking the given ip-restrction plugin config")
}