Add test for custom CA certs

Author: dajudge

src/test/java/com/dajudge/kindcontainer/BaseKindContainerTest.java

@@ -1,6 +1,8 @@
 package com.dajudge.kindcontainer;
 
+import static com.dajudge.kindcontainer.TestUtils.stringResource;
 import static java.lang.Runtime.getRuntime;
+import static java.util.Collections.singletonList;
 
 abstract class BaseKindContainerTest {
     static final KindContainer K8S = createContainer();
@@ -11,7 +13,8 @@ private static KindContainer createContainer() {
                 .withExposedPorts(30000)
                 .waitingFor(NullWaitStrategy.INSTANCE)
                 .withPodSubnet("10.245.0.0/16")
-                .withServiceSubnet("10.112.0.0/12");
+                .withServiceSubnet("10.112.0.0/12")
+                .withCaCerts(singletonList(stringResource("test.crt")));
         container.start();
         getRuntime().addShutdownHook(new Thread(container::stop));
         return container;

src/test/java/com/dajudge/kindcontainer/CertificatesTest.java

@@ -0,0 +1,17 @@
+package com.dajudge.kindcontainer;
+
+import org.junit.Test;
+
+import static com.dajudge.kindcontainer.TestUtils.stringResource;
+import static org.junit.Assert.assertTrue;
+
+public class CertificatesTest extends BaseKindContainerTest {
+    @Test
+    public void adds_custom_certificate() {
+        final String allCerts = K8S.copyFileFromContainer(
+                "/etc/ssl/certs/ca-certificates.crt",
+                TestUtils::readString
+        );
+        assertTrue(allCerts.contains(stringResource("test.crt")));
+    }
+}

src/test/java/com/dajudge/kindcontainer/TestUtils.java

@@ -8,11 +8,14 @@
 import org.testcontainers.shaded.okhttp3.Response;
 import org.testcontainers.shaded.okhttp3.ResponseBody;
 
+import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.InputStream;
 import java.util.HashMap;
 import java.util.Random;
 import java.util.concurrent.Callable;
 
+import static java.nio.charset.StandardCharsets.UTF_8;
 import static java.util.UUID.randomUUID;
 
 final class TestUtils {
@@ -83,4 +86,22 @@ static boolean isRunning(final KubernetesClient client, final HasMetadata pod) {
                 .withName(pod.getMetadata().getName())
                 .get().getStatus().getPhase());
     }
+
+    public static String stringResource(final String s) {
+        try (final InputStream is = TestUtils.class.getClassLoader().getResourceAsStream(s)) {
+            return readString(is);
+        } catch (final IOException e) {
+            throw new RuntimeException("Failed to read string resource: " + s, e);
+        }
+    }
+
+    public static String readString(final InputStream is) throws IOException {
+        final ByteArrayOutputStream bos = new ByteArrayOutputStream();
+        final byte[] buffer = new byte[1024];
+        int read;
+        while ((read = is.read(buffer)) > 0) {
+            bos.write(buffer, 0, read);
+        }
+        return new String(bos.toByteArray(), UTF_8);
+    }
 }

src/test/resources/test.crt

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----
+MIIEqzCCApOgAwIBAgIRAIvhKg5ZRO08VGQx8JdhT+UwDQYJKoZIhvcNAQELBQAw
+GjEYMBYGA1UEAwwPRmFrZSBMRSBSb290IFgxMB4XDTE2MDUyMzIyMDc1OVoXDTM2
+MDUyMzIyMDc1OVowIjEgMB4GA1UEAwwXRmFrZSBMRSBJbnRlcm1lZGlhdGUgWDEw
+ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWKySDn7rWZc5ggjz3ZB0
+8jO4xti3uzINfD5sQ7Lj7hzetUT+wQob+iXSZkhnvx+IvdbXF5/yt8aWPpUKnPym
+oLxsYiI5gQBLxNDzIec0OIaflWqAr29m7J8+NNtApEN8nZFnf3bhehZW7AxmS1m0
+ZnSsdHw0Fw+bgixPg2MQ9k9oefFeqa+7Kqdlz5bbrUYV2volxhDFtnI4Mh8BiWCN
+xDH1Hizq+GKCcHsinDZWurCqder/afJBnQs+SBSL6MVApHt+d35zjBD92fO2Je56
+dhMfzCgOKXeJ340WhW3TjD1zqLZXeaCyUNRnfOmWZV8nEhtHOFbUCU7r/KkjMZO9
+AgMBAAGjgeMwgeAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAw
+HQYDVR0OBBYEFMDMA0a5WCDMXHJw8+EuyyCm9Wg6MHoGCCsGAQUFBwEBBG4wbDA0
+BggrBgEFBQcwAYYoaHR0cDovL29jc3Auc3RnLXJvb3QteDEubGV0c2VuY3J5cHQu
+b3JnLzA0BggrBgEFBQcwAoYoaHR0cDovL2NlcnQuc3RnLXJvb3QteDEubGV0c2Vu
+Y3J5cHQub3JnLzAfBgNVHSMEGDAWgBTBJnSkikSg5vogKNhcI5pFiBh54DANBgkq
+hkiG9w0BAQsFAAOCAgEABYSu4Il+fI0MYU42OTmEj+1HqQ5DvyAeyCA6sGuZdwjF
+UGeVOv3NnLyfofuUOjEbY5irFCDtnv+0ckukUZN9lz4Q2YjWGUpW4TTu3ieTsaC9
+AFvCSgNHJyWSVtWvB5XDxsqawl1KzHzzwr132bF2rtGtazSqVqK9E07sGHMCf+zp
+DQVDVVGtqZPHwX3KqUtefE621b8RI6VCl4oD30Olf8pjuzG4JKBFRFclzLRjo/h7
+IkkfjZ8wDa7faOjVXx6n+eUQ29cIMCzr8/rNWHS9pYGGQKJiY2xmVC9h12H99Xyf
+zWE9vb5zKP3MVG6neX1hSdo7PEAb9fqRhHkqVsqUvJlIRmvXvVKTwNCP3eCjRCCI
+PTAvjV+4ni786iXwwFYNz8l3PmPLCyQXWGohnJ8iBm+5nk7O2ynaPVW0U2W+pt2w
+SVuvdDM5zGv2f9ltNWUiYZHJ1mmO97jSY/6YfdOUH66iRtQtDkHBRdkNBsMbD+Em
+2TgBldtHNSJBfB3pm9FblgOcJ0FSWcUDWJ7vO0+NTXlgrRofRT6pVywzxVo6dND0
+WzYlTWeUVsO40xJqhgUQRER9YLOLxJ0O6C8i0xFxAMKOtSdodMB3RIwt7RFQ0uyt
+n5Z5MqkYhlMI3J1tPRTp1nEt9fyGspBOO05gi148Qasp+3N+svqKomoQglNoAxU=
+-----END CERTIFICATE-----