2023-09-07 13:06:21 -05:00
|
|
|
# Note: Intended to be run as "make run-blackbox-tests" or "make run-blackbox-ci"
|
2023-08-30 14:24:28 -05:00
|
|
|
# Makefile target installs & checks all necessary tooling
|
|
|
|
# Extra tools that are not covered in Makefile target needs to be added in verify_prerequisites()
|
|
|
|
|
|
|
|
load helpers_zot
|
|
|
|
load helpers_wait
|
|
|
|
|
|
|
|
|
|
|
|
function verify_prerequisites() {
|
|
|
|
if [ ! $(command -v curl) ]; then
|
|
|
|
echo "you need to install curl as a prerequisite to running the tests" >&3
|
|
|
|
return 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
if [ ! $(command -v jq) ]; then
|
|
|
|
echo "you need to install jq as a prerequisite to running the tests" >&3
|
|
|
|
return 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
return 0
|
|
|
|
}
|
2022-04-27 01:00:20 -05:00
|
|
|
|
|
|
|
function setup_file() {
|
2023-08-30 14:24:28 -05:00
|
|
|
export COSIGN_PASSWORD=""
|
2023-09-20 14:01:36 -05:00
|
|
|
export COSIGN_OCI_EXPERIMENTAL=1
|
|
|
|
export COSIGN_EXPERIMENTAL=1
|
2023-08-30 14:24:28 -05:00
|
|
|
|
2022-04-27 01:00:20 -05:00
|
|
|
# Verify prerequisites are available
|
2023-08-30 14:24:28 -05:00
|
|
|
if ! $(verify_prerequisites); then
|
2022-04-27 01:00:20 -05:00
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Download test data to folder common for the entire suite, not just this file
|
2023-02-17 16:54:49 -05:00
|
|
|
skopeo --insecure-policy copy --format=oci docker://ghcr.io/project-zot/golang:1.20 oci:${TEST_DATA_DIR}/golang:1.20
|
2022-04-27 01:00:20 -05:00
|
|
|
# Setup zot server
|
2022-11-22 13:10:32 -05:00
|
|
|
local zot_sync_per_root_dir=${BATS_FILE_TMPDIR}/zot-per
|
|
|
|
local zot_sync_ondemand_root_dir=${BATS_FILE_TMPDIR}/zot-ondemand
|
|
|
|
|
|
|
|
local zot_sync_per_config_file=${BATS_FILE_TMPDIR}/zot_sync_per_config.json
|
|
|
|
local zot_sync_ondemand_config_file=${BATS_FILE_TMPDIR}/zot_sync_ondemand_config.json
|
|
|
|
|
2022-04-27 01:00:20 -05:00
|
|
|
local zot_minimal_root_dir=${BATS_FILE_TMPDIR}/zot-minimal
|
|
|
|
local zot_minimal_config_file=${BATS_FILE_TMPDIR}/zot_minimal_config.json
|
2022-11-22 13:10:32 -05:00
|
|
|
|
2022-04-27 01:00:20 -05:00
|
|
|
local oci_data_dir=${BATS_FILE_TMPDIR}/oci
|
2022-11-22 13:10:32 -05:00
|
|
|
mkdir -p ${zot_sync_per_root_dir}
|
|
|
|
mkdir -p ${zot_sync_ondemand_root_dir}
|
2022-04-27 01:00:20 -05:00
|
|
|
mkdir -p ${zot_minimal_root_dir}
|
|
|
|
mkdir -p ${oci_data_dir}
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=$(get_free_port)
|
|
|
|
echo ${zot_port1} > ${BATS_FILE_TMPDIR}/zot.port1
|
|
|
|
zot_port2=$(get_free_port)
|
|
|
|
echo ${zot_port2} > ${BATS_FILE_TMPDIR}/zot.port2
|
|
|
|
zot_port3=$(get_free_port)
|
|
|
|
echo ${zot_port3} > ${BATS_FILE_TMPDIR}/zot.port3
|
2022-11-22 13:10:32 -05:00
|
|
|
|
|
|
|
cat >${zot_sync_per_config_file} <<EOF
|
|
|
|
{
|
2023-08-30 14:24:28 -05:00
|
|
|
"distSpecVersion": "1.1.0-dev",
|
2022-11-22 13:10:32 -05:00
|
|
|
"storage": {
|
|
|
|
"rootDirectory": "${zot_sync_per_root_dir}"
|
|
|
|
},
|
|
|
|
"http": {
|
|
|
|
"address": "0.0.0.0",
|
2023-11-15 13:44:31 -05:00
|
|
|
"port": "${zot_port1}"
|
2022-11-22 13:10:32 -05:00
|
|
|
},
|
|
|
|
"log": {
|
|
|
|
"level": "debug"
|
|
|
|
},
|
|
|
|
"extensions": {
|
|
|
|
"sync": {
|
|
|
|
"registries": [
|
|
|
|
{
|
|
|
|
"urls": [
|
2023-11-15 13:44:31 -05:00
|
|
|
"http://localhost:${zot_port3}"
|
2022-11-22 13:10:32 -05:00
|
|
|
],
|
|
|
|
"onDemand": false,
|
|
|
|
"tlsVerify": false,
|
2023-12-11 13:00:34 -05:00
|
|
|
"PollInterval": "10s",
|
2022-11-22 13:10:32 -05:00
|
|
|
"content": [
|
|
|
|
{
|
|
|
|
"prefix": "**"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
EOF
|
|
|
|
|
|
|
|
cat >${zot_sync_ondemand_config_file} <<EOF
|
2022-04-27 01:00:20 -05:00
|
|
|
{
|
2023-08-30 14:24:28 -05:00
|
|
|
"distSpecVersion": "1.1.0-dev",
|
2022-04-27 01:00:20 -05:00
|
|
|
"storage": {
|
2022-11-22 13:10:32 -05:00
|
|
|
"rootDirectory": "${zot_sync_ondemand_root_dir}"
|
2022-04-27 01:00:20 -05:00
|
|
|
},
|
|
|
|
"http": {
|
|
|
|
"address": "0.0.0.0",
|
2023-11-15 13:44:31 -05:00
|
|
|
"port": "${zot_port2}"
|
2022-04-27 01:00:20 -05:00
|
|
|
},
|
|
|
|
"log": {
|
|
|
|
"level": "debug"
|
|
|
|
},
|
|
|
|
"extensions": {
|
|
|
|
"sync": {
|
|
|
|
"registries": [
|
|
|
|
{
|
|
|
|
"urls": [
|
2023-11-15 13:44:31 -05:00
|
|
|
"http://localhost:${zot_port3}"
|
2022-04-27 01:00:20 -05:00
|
|
|
],
|
|
|
|
"onDemand": true,
|
|
|
|
"tlsVerify": false,
|
|
|
|
"content": [
|
|
|
|
{
|
|
|
|
"prefix": "**"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
EOF
|
|
|
|
cat >${zot_minimal_config_file} <<EOF
|
|
|
|
{
|
2023-08-30 14:24:28 -05:00
|
|
|
"distSpecVersion": "1.1.0-dev",
|
2022-04-27 01:00:20 -05:00
|
|
|
"storage": {
|
|
|
|
"rootDirectory": "${zot_minimal_root_dir}"
|
|
|
|
},
|
|
|
|
"http": {
|
|
|
|
"address": "0.0.0.0",
|
2023-11-15 13:44:31 -05:00
|
|
|
"port": "${zot_port3}"
|
2022-04-27 01:00:20 -05:00
|
|
|
},
|
|
|
|
"log": {
|
|
|
|
"level": "debug"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
EOF
|
2022-11-22 13:10:32 -05:00
|
|
|
git -C ${BATS_FILE_TMPDIR} clone https://github.com/project-zot/helm-charts.git
|
|
|
|
|
2023-11-28 15:08:15 -05:00
|
|
|
zot_serve ${ZOT_MINIMAL_PATH} ${zot_minimal_config_file}
|
|
|
|
wait_zot_reachable ${zot_port3}
|
|
|
|
|
2023-08-30 14:24:28 -05:00
|
|
|
zot_serve ${ZOT_PATH} ${zot_sync_per_config_file}
|
2023-11-15 13:44:31 -05:00
|
|
|
wait_zot_reachable ${zot_port1}
|
2022-11-22 13:10:32 -05:00
|
|
|
|
2023-08-30 14:24:28 -05:00
|
|
|
zot_serve ${ZOT_PATH} ${zot_sync_ondemand_config_file}
|
2023-11-15 13:44:31 -05:00
|
|
|
wait_zot_reachable ${zot_port2}
|
2022-04-27 01:00:20 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
function teardown_file() {
|
2023-08-30 14:24:28 -05:00
|
|
|
zot_stop_all
|
|
|
|
run rm -rf ${HOME}/.config/notation
|
2022-04-27 01:00:20 -05:00
|
|
|
}
|
|
|
|
|
2022-11-22 13:10:32 -05:00
|
|
|
# sync image
|
|
|
|
@test "sync golang image periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-04-27 01:00:20 -05:00
|
|
|
run skopeo --insecure-policy copy --dest-tls-verify=false \
|
2023-02-17 16:54:49 -05:00
|
|
|
oci:${TEST_DATA_DIR}/golang:1.20 \
|
2023-11-15 13:44:31 -05:00
|
|
|
docker://127.0.0.1:${zot_port3}/golang:1.20
|
2022-04-27 01:00:20 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/_catalog
|
2022-04-27 01:00:20 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[]') = '"golang"' ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port1}/v2/_catalog
|
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/golang/tags/list
|
2022-04-27 01:00:20 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-02-17 16:54:49 -05:00
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"1.20"' ]
|
2023-08-30 14:24:28 -05:00
|
|
|
|
2022-11-22 13:10:32 -05:00
|
|
|
run sleep 20s
|
2023-08-30 14:24:28 -05:00
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port1}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[]') = '"golang"' ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port1}/v2/golang/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-02-17 16:54:49 -05:00
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"1.20"' ]
|
2022-11-22 13:10:32 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync golang image ondemand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-11-22 13:10:32 -05:00
|
|
|
run skopeo --insecure-policy copy --dest-tls-verify=false \
|
2023-02-17 16:54:49 -05:00
|
|
|
oci:${TEST_DATA_DIR}/golang:1.20 \
|
2023-11-15 13:44:31 -05:00
|
|
|
docker://127.0.0.1:${zot_port3}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/_catalog
|
2022-04-27 01:00:20 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[]') = '"golang"' ]
|
2022-11-22 13:10:32 -05:00
|
|
|
|
|
|
|
# sync golang on demand
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/golang/manifests/1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/golang/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-02-17 16:54:49 -05:00
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"1.20"' ]
|
2022-11-22 13:10:32 -05:00
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[]') = '"golang"' ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/golang/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-02-17 16:54:49 -05:00
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"1.20"' ]
|
2022-11-22 13:10:32 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
# sync index
|
|
|
|
@test "sync image index periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-11-22 13:10:32 -05:00
|
|
|
# --multi-arch below pushes an image index (containing many images) instead
|
|
|
|
# of an image manifest (single image)
|
|
|
|
run skopeo --insecure-policy copy --format=oci --dest-tls-verify=false --multi-arch=all \
|
|
|
|
docker://public.ecr.aws/docker/library/busybox:latest \
|
2023-11-15 13:44:31 -05:00
|
|
|
docker://127.0.0.1:${zot_port3}/busybox:latest
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[0]') = '"busybox"' ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/busybox/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"latest"' ]
|
|
|
|
|
|
|
|
run sleep 30s
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port1}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[0]') = '"busybox"' ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port1}/v2/busybox/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"latest"' ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync image index on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-11-22 13:10:32 -05:00
|
|
|
# --multi-arch below pushes an image index (containing many images) instead
|
|
|
|
# of an image manifest (single image)
|
|
|
|
run skopeo --insecure-policy copy --format=oci --dest-tls-verify=false --multi-arch=all \
|
|
|
|
docker://public.ecr.aws/docker/library/busybox:latest \
|
2023-11-15 13:44:31 -05:00
|
|
|
docker://127.0.0.1:${zot_port3}/busybox:latest
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[1]') = '"golang"' ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port3}/v2/busybox/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"latest"' ]
|
|
|
|
|
|
|
|
# sync busybox index on demand
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/busybox/manifests/latest
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/_catalog
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.repositories[1]') = '"golang"' ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run curl http://127.0.0.1:${zot_port2}/v2/busybox/tags/list
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.tags[]') = '"latest"' ]
|
|
|
|
}
|
|
|
|
|
|
|
|
# sign signatures
|
|
|
|
@test "sign/verify with cosign" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-11-22 13:10:32 -05:00
|
|
|
run cosign initialize
|
|
|
|
[ "$status" -eq 0 ]
|
2023-08-30 14:24:28 -05:00
|
|
|
run cosign generate-key-pair --output-key-prefix "${BATS_FILE_TMPDIR}/cosign-sign-sync-test"
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run cosign sign --key ${BATS_FILE_TMPDIR}/cosign-sign-sync-test.key localhost:${zot_port3}/golang:1.20 --yes
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run cosign sign --registry-referrers-mode=oci-1-1 --key ${BATS_FILE_TMPDIR}/cosign-sign-sync-test.key localhost:${zot_port3}/golang:1.20 --yes
|
2023-09-20 14:01:36 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run cosign verify --key ${BATS_FILE_TMPDIR}/cosign-sign-sync-test.pub localhost:${zot_port3}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sign/verify with notation" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2023-02-13 13:43:52 -05:00
|
|
|
run notation cert generate-test "notation-sign-sync-test"
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-02-13 13:43:52 -05:00
|
|
|
|
|
|
|
local trust_policy_file=${HOME}/.config/notation/trustpolicy.json
|
|
|
|
|
|
|
|
cat >${trust_policy_file} <<EOF
|
|
|
|
{
|
|
|
|
"version": "1.0",
|
|
|
|
"trustPolicies": [
|
|
|
|
{
|
|
|
|
"name": "notation-sign-sync-test",
|
|
|
|
"registryScopes": [ "*" ],
|
|
|
|
"signatureVerification": {
|
2023-08-30 14:24:28 -05:00
|
|
|
"level" : "strict"
|
2023-02-13 13:43:52 -05:00
|
|
|
},
|
|
|
|
"trustStores": [ "ca:notation-sign-sync-test" ],
|
|
|
|
"trustedIdentities": [
|
|
|
|
"*"
|
|
|
|
]
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
EOF
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run notation sign --key "notation-sign-sync-test" --insecure-registry localhost:${zot_port3}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run notation verify --insecure-registry localhost:${zot_port3}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run notation list --insecure-registry localhost:${zot_port3}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync signatures periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
2022-11-22 13:10:32 -05:00
|
|
|
# wait for signatures to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 15s
|
2022-11-22 13:10:32 -05:00
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run notation verify --insecure-registry localhost:${zot_port1}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run cosign verify --key ${BATS_FILE_TMPDIR}/cosign-sign-sync-test.pub localhost:${zot_port1}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync signatures ondemand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
run notation verify --insecure-registry localhost:${zot_port2}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
|
2023-11-15 13:44:31 -05:00
|
|
|
run cosign verify --key ${BATS_FILE_TMPDIR}/cosign-sign-sync-test.pub localhost:${zot_port2}/golang:1.20
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
# sync oras artifacts
|
|
|
|
@test "push oras artifact periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2022-11-22 13:10:32 -05:00
|
|
|
echo "{\"name\":\"foo\",\"value\":\"bar\"}" > config.json
|
|
|
|
echo "hello world" > artifact.txt
|
2023-11-15 13:44:31 -05:00
|
|
|
run oras push --plain-http 127.0.0.1:${zot_port3}/hello-artifact:v2 \
|
2022-11-22 13:10:32 -05:00
|
|
|
--config config.json:application/vnd.acme.rocket.config.v1+json artifact.txt:text/plain -d -v
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
rm -f artifact.txt
|
|
|
|
rm -f config.json
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync oras artifact periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
|
|
|
# wait for oras artifact to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 15s
|
2023-11-15 13:44:31 -05:00
|
|
|
run oras pull --plain-http 127.0.0.1:${zot_port1}/hello-artifact:v2 -d -v
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
grep -q "hello world" artifact.txt
|
|
|
|
rm -f artifact.txt
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync oras artifact on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
run oras pull --plain-http 127.0.0.1:${zot_port2}/hello-artifact:v2 -d -v
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
grep -q "hello world" artifact.txt
|
|
|
|
rm -f artifact.txt
|
|
|
|
}
|
|
|
|
|
|
|
|
# sync helm chart
|
|
|
|
@test "push helm chart" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
2023-08-30 14:24:28 -05:00
|
|
|
run helm package ${BATS_FILE_TMPDIR}/helm-charts/charts/zot -d ${BATS_FILE_TMPDIR}
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
local chart_version=$(awk '/version/{printf $2}' ${BATS_FILE_TMPDIR}/helm-charts/charts/zot/Chart.yaml)
|
2023-11-15 13:44:31 -05:00
|
|
|
run helm push ${BATS_FILE_TMPDIR}/zot-${chart_version}.tgz oci://localhost:${zot_port3}/zot-chart
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync helm chart periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
2022-11-22 13:10:32 -05:00
|
|
|
# wait for helm chart to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 15s
|
2022-11-22 13:10:32 -05:00
|
|
|
|
|
|
|
local chart_version=$(awk '/version/{printf $2}' ${BATS_FILE_TMPDIR}/helm-charts/charts/zot/Chart.yaml)
|
2023-11-15 13:44:31 -05:00
|
|
|
run helm pull oci://localhost:${zot_port1}/zot-chart/zot --version ${chart_version} -d ${BATS_FILE_TMPDIR}
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync helm chart on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
2022-11-22 13:10:32 -05:00
|
|
|
local chart_version=$(awk '/version/{printf $2}' ${BATS_FILE_TMPDIR}/helm-charts/charts/zot/Chart.yaml)
|
2023-11-15 13:44:31 -05:00
|
|
|
run helm pull oci://localhost:${zot_port2}/zot-chart/zot --version ${chart_version} -d ${BATS_FILE_TMPDIR}
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
# sync OCI artifacts
|
2022-12-09 14:38:00 -05:00
|
|
|
@test "push OCI artifact (oci image mediatype) with regclient" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
|
|
|
run regctl registry set localhost:${zot_port3} --tls disabled
|
|
|
|
run regctl registry set localhost:${zot_port1} --tls disabled
|
|
|
|
run regctl registry set localhost:${zot_port2} --tls disabled
|
|
|
|
|
|
|
|
run regctl artifact put localhost:${zot_port3}/artifact:demo <<EOF
|
2022-12-09 14:38:00 -05:00
|
|
|
this is an oci image artifact
|
2022-11-22 13:10:32 -05:00
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
2022-12-09 14:38:00 -05:00
|
|
|
@test "sync OCI artifact (oci image mediatype) periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
2022-11-22 13:10:32 -05:00
|
|
|
# wait for helm chart to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 15s
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl manifest get localhost:${zot_port1}/artifact:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port1}/artifact:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "${lines[-1]}" == "this is an oci image artifact" ]
|
2022-11-22 13:10:32 -05:00
|
|
|
}
|
|
|
|
|
2022-12-09 14:38:00 -05:00
|
|
|
@test "sync OCI artifact (oci image mediatype) on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
run regctl manifest get localhost:${zot_port2}/artifact:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port2}/artifact:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "${lines[-1]}" == "this is an oci image artifact" ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "push OCI artifact (oci artifact mediatype) with regclient" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
|
|
|
run regctl artifact put --artifact-type "application/vnd.example.icecream.v1" localhost:${zot_port3}/newartifact:demo <<EOF
|
2022-12-09 14:38:00 -05:00
|
|
|
this is an oci artifact
|
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync OCI artifact (oci artifact mediatype) periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
2022-12-09 14:38:00 -05:00
|
|
|
# wait for helm chart to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 15s
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl manifest get localhost:${zot_port1}/newartifact:demo
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port1}/newartifact:demo
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "this is an oci artifact" ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync OCI artifact (oci artifact mediatype) on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
run regctl manifest get localhost:${zot_port2}/newartifact:demo
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port2}/newartifact:demo
|
2022-12-09 14:38:00 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "this is an oci artifact" ]
|
2022-11-22 13:10:32 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
@test "push OCI artifact references with regclient" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port3=`cat ${BATS_FILE_TMPDIR}/zot.port3`
|
|
|
|
run regctl artifact put localhost:${zot_port3}/manifest-ref:demo <<EOF
|
2022-11-22 13:10:32 -05:00
|
|
|
test artifact
|
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port3}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact put --annotation demo=true --annotation format=oci --artifact-type "application/vnd.example.icecream.v1" --subject localhost:${zot_port3}/manifest-ref:demo << EOF
|
2022-11-22 13:10:32 -05:00
|
|
|
test reference
|
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
# with artifact media-type
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact put localhost:${zot_port3}/artifact-ref:demo <<EOF
|
2022-11-22 13:10:32 -05:00
|
|
|
test artifact
|
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port3}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact put --annotation demo=true --annotation format=oci --artifact-type "application/vnd.example.icecream.v1" --subject localhost:${zot_port3}/artifact-ref:demo << EOF
|
2022-11-22 13:10:32 -05:00
|
|
|
test reference
|
|
|
|
EOF
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync OCI artifact references periodically" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port1=`cat ${BATS_FILE_TMPDIR}/zot.port1`
|
2022-11-22 13:10:32 -05:00
|
|
|
# wait for OCI artifacts to be copied
|
2023-05-31 12:26:23 -05:00
|
|
|
run sleep 20
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port1}/manifest-ref:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "test artifact" ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port1}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/vnd.example.icecream.v1" localhost:${zot_port1}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/invalid" localhost:${zot_port1}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
|
|
|
# with artifact media-type
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port1}/artifact-ref:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "test artifact" ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port1}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/vnd.example.icecream.v1" localhost:${zot_port1}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/invalid" localhost:${zot_port1}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
|
|
|
}
|
|
|
|
|
|
|
|
@test "sync OCI artifact references on demand" {
|
2023-11-15 13:44:31 -05:00
|
|
|
zot_port2=`cat ${BATS_FILE_TMPDIR}/zot.port2`
|
|
|
|
run regctl artifact get localhost:${zot_port2}/manifest-ref:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "test artifact" ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port2}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/vnd.example.icecream.v1" localhost:${zot_port2}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/invalid" localhost:${zot_port2}/manifest-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
|
|
|
# with artifact media-type
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact get localhost:${zot_port2}/artifact-ref:demo
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ "${lines[-1]}" == "test artifact" ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list localhost:${zot_port2}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/vnd.example.icecream.v1" localhost:${zot_port2}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 1 ]
|
2023-11-15 13:44:31 -05:00
|
|
|
run regctl artifact list --filter-artifact-type "application/invalid" localhost:${zot_port2}/artifact-ref:demo --format raw-body
|
2022-11-22 13:10:32 -05:00
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
[ $(echo "${lines[-1]}" | jq '.manifests | length') -eq 0 ]
|
2022-04-27 01:00:20 -05:00
|
|
|
}
|