Function checkWebhookSetup

tests/utils/operator/webhooks.go:139–192

checkWebhookSetup ensures that the operator has finished the webhook setup. Webhook configuration names are resolved via configuration.Current, so ENABLE_WEBHOOK_NAMESPACE_SUFFIX and OPERATOR_NAMESPACE must be set in the test process environment to match the operator deployment under test.

(
	ctx context.Context,
	crudClient client.Client,
	namespace string,
)

// ENABLE_WEBHOOK_NAMESPACE_SUFFIX and OPERATOR_NAMESPACE must be set in the
// test process environment to match the operator deployment under test.
func checkWebhookSetup(
	ctx context.Context,
	crudClient client.Client,
	namespace string,
) error {
	// Check CA
	secret := &corev1.Secret{}
	secretNamespacedName := types.NamespacedName{
		Namespace: namespace,
		Name:      controller.WebhookSecretName,
	}
	err := objects.Get(ctx, crudClient, secretNamespacedName, secret)
	if err != nil {
		return err
	}

	ca := secret.Data["tls.crt"]

	mutatingWebhookConfig, err := getCNPGsMutatingWebhookConf(ctx, crudClient)
	if err != nil {
		return err
	}

	for _, webhook := range mutatingWebhookConfig.Webhooks {
		if !bytes.Equal(webhook.ClientConfig.CABundle, ca) {
			return fmt.Errorf("CA bundle mismatch in %v: secret %v/%v (ca len=%d) does not match webhook config (bundle len=%d)",
				configuration.Current.GetMutatingWebhookConfigurationName(),
				secret.Namespace,
				secret.Name,
				len(ca),
				len(webhook.ClientConfig.CABundle),
			)
		}
	}

	validatingWebhookConfig, err := getCNPGsValidatingWebhookConf(ctx, crudClient)
	if err != nil {
		return err
	}

	for _, webhook := range validatingWebhookConfig.Webhooks {
		if !bytes.Equal(webhook.ClientConfig.CABundle, ca) {
			return fmt.Errorf("CA bundle mismatch in %v: secret %v/%v (ca len=%d) does not match webhook config (bundle len=%d)",
				configuration.Current.GetValidatingWebhookConfigurationName(),
				secret.Namespace,
				secret.Name,
				len(ca),
				len(webhook.ClientConfig.CABundle),
			)
		}
	}

	return nil
}

// getCNPGsMutatingWebhookConf get the MutatingWebhook linked to the operator.
// The lookup name is resolved from configuration.Current, which reads the test