Function TestServiceCreateDigestPinning

client/service_create_test.go:104–170

(t *testing.T)

}

func TestServiceCreateDigestPinning(t *testing.T) {
	dgst := "sha256:c0537ff6a5218ef531ece93d4984efc99bbf3f7497c0a7726c88e2bb7584dc96"
	dgstAlt := "sha256:37ffbf3f7497c07584dc9637ffbf3f7497c0758c0537ffbf3f7497c0c88e2bb7"
	serviceCreateImage := ""
	pinByDigestTests := []struct {
		img      string // input image provided by the user
		expected string // expected image after digest pinning
	}{
		// default registry returns familiar string
		{"docker.io/library/alpine", "alpine:latest@" + dgst},
		// provided tag is preserved and digest added
		{"alpine:edge", "alpine:edge@" + dgst},
		// image with provided alternative digest remains unchanged
		{"alpine@" + dgstAlt, "alpine@" + dgstAlt},
		// image with provided tag and alternative digest remains unchanged
		{"alpine:edge@" + dgstAlt, "alpine:edge@" + dgstAlt},
		// image on alternative registry does not result in familiar string
		{"alternate.registry/library/alpine", "alternate.registry/library/alpine:latest@" + dgst},
		// unresolvable image does not get a digest
		{"cannotresolve", "cannotresolve:latest"},
	}

	client, err := New(WithMockClient(func(req *http.Request) (*http.Response, error) {
		if strings.HasPrefix(req.URL.Path, defaultAPIPath+"/services/create") {
			// reset and set image received by the service create endpoint
			serviceCreateImage = ""
			var service swarm.ServiceSpec
			if err := json.NewDecoder(req.Body).Decode(&service); err != nil {
				return nil, errors.New("could not parse service create request")
			}
			serviceCreateImage = service.TaskTemplate.ContainerSpec.Image

			return mockJSONResponse(http.StatusOK, nil, swarm.ServiceCreateResponse{
				ID: "service_id",
			})(req)
		} else if strings.HasPrefix(req.URL.Path, defaultAPIPath+"/distribution/cannotresolve") {
			// unresolvable image
			return nil, errors.New("cannot resolve image")
		} else if strings.HasPrefix(req.URL.Path, defaultAPIPath+"/distribution/") {
			// resolvable images
			return mockJSONResponse(http.StatusOK, nil, registrytypes.DistributionInspect{
				Descriptor: ocispec.Descriptor{
					Digest: digest.Digest(dgst),
				},
			})(req)
		}
		return nil, fmt.Errorf("unexpected URL '%s'", req.URL.Path)
	}))
	assert.NilError(t, err)

	// run pin by digest tests
	for _, p := range pinByDigestTests {
		r, err := client.ServiceCreate(t.Context(), ServiceCreateOptions{
			Spec: swarm.ServiceSpec{
				TaskTemplate: swarm.TaskSpec{
					ContainerSpec: &swarm.ContainerSpec{
						Image: p.img,
					},