Merge pull request #34 from chen-keinan/test/downstream-connection-limit-config-map

test: downstream connection limit config map test   rego

Author: chen-keinan

Makefile

@@ -37,6 +37,7 @@ test_rego:
 	./opa test ./internal/security/mesh/istio/avoid_overly_broad_hosts_configurations_test.rego ./internal/security/mesh/istio/avoid_overly_broad_hosts_configurations.rego -v
 	./opa test ./internal/security/mesh/istio/close_port_8008_as_unauthenticate_plaintext_test.rego ./internal/security/mesh/istio/close_port_8008_as_unauthenticate_plaintext.rego -v
 	./opa test ./internal/security/mesh/istio/close_port_15010_as_unauthenticate_plaintext_test.rego ./internal/security/mesh/istio/close_port_15010_as_unauthenticate_plaintext.rego -v
+	./opa test ./internal/security/mesh/istio/downstream_connection_limit_config_map_test.rego ./internal/security/mesh/istio/downstream_connection_limit_config_map.rego -v
 
 test_rego_travis:
 	curl -L -o opa https://openpolicyagent.org/downloads/v0.37.1/opa_linux_amd64_static
@@ -51,6 +52,7 @@ test_rego_travis:
 	./opa test ./internal/security/mesh/istio/avoid_overly_broad_hosts_configurations_test.rego ./internal/security/mesh/istio/avoid_overly_broad_hosts_configurations.rego -v
 	./opa test ./internal/security/mesh/istio/close_port_8008_as_unauthenticate_plaintext_test.rego ./internal/security/mesh/istio/close_port_8008_as_unauthenticate_plaintext.rego -v
 	./opa test ./internal/security/mesh/istio/close_port_15010_as_unauthenticate_plaintext_test.rego ./internal/security/mesh/istio/close_port_15010_as_unauthenticate_plaintext.rego -v
+	./opa test ./internal/security/mesh/istio/downstream_connection_limit_config_map_test.rego ./internal/security/mesh/istio/downstream_connection_limit_config_map.rego -v
 
 build:
 	export PATH=$GOPATH/bin:$PATH;

internal/security/mesh/istio/downstream_connection_limit_config_map_test.rego

@@ -0,0 +1,37 @@
+package istio
+
+test_downstream_connection_limit_config_map{
+a:= policy_eval with input as {
+     "apiVersion": "v1",
+     "data":
+       {
+         "custom_bootstrap.json": "sss"
+       }
+     ,
+     "kind": "ConfigMap",
+     "metadata": {
+       "creationTimestamp": "2022-02-03T09:50:01Z",
+       "name": "istio-custom-bootstrap-config",
+       "namespace": "default"
+     }
+   }
+ a.match
+}
+
+test_downstream_connection_no_limit_config_map{
+a:= policy_eval with input as {
+     "apiVersion": "v1",
+     "data":
+       {
+         "ca": "sss"
+       }
+     ,
+     "kind": "ConfigMap",
+     "metadata": {
+       "creationTimestamp": "2022-02-03T09:50:01Z",
+       "name": "istio-custom-bootstrap-config",
+       "namespace": "default"
+     }
+   }
+ not a.match
+}