mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
afdb894d85
50 end-to-end test cases derived from real Azure built-in policies. Each file contains a complete policy definition, sample resources, and expected evaluation results. Coverage spans storage, networking, compute, security, monitoring, database, identity, governance, and update management scenarios. Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
163 lines
4.9 KiB
YAML
163 lines
4.9 KiB
YAML
# Copyright (c) Microsoft Corporation.
|
|
# Licensed under the MIT License.
|
|
|
|
# E2E Test: Container Instances/ContainerInstance_LogAnalytics_Append
|
|
# Real Azure Policy: "Configure diagnostics for container group to log analytics workspace"
|
|
# Source: regolator/policyDefinitions/Container Instances/ContainerInstance_LogAnalytics_Append.json
|
|
#
|
|
# Features exercised:
|
|
# - Append effect with details array (two fields)
|
|
# - exists "false" operator (multiple conditions)
|
|
# - Parameterized effect (Append/Disabled)
|
|
# - Parameters injected into details value
|
|
|
|
aliases: test_aliases.json
|
|
|
|
policy_definition: |
|
|
{
|
|
"properties": {
|
|
"displayName": "Configure diagnostics for container group to log analytics workspace",
|
|
"policyType": "BuiltIn",
|
|
"mode": "All",
|
|
"parameters": {
|
|
"effect": {
|
|
"type": "String",
|
|
"allowedValues": ["Append", "Disabled"],
|
|
"defaultValue": "Append"
|
|
},
|
|
"workspaceId": {
|
|
"type": "String",
|
|
"metadata": {
|
|
"displayName": "Workspace ID"
|
|
}
|
|
},
|
|
"workspaceKey": {
|
|
"type": "String",
|
|
"metadata": {
|
|
"displayName": "Workspace Key"
|
|
}
|
|
}
|
|
},
|
|
"policyRule": {
|
|
"if": {
|
|
"allOf": [
|
|
{
|
|
"field": "type",
|
|
"equals": "Microsoft.ContainerInstance/containerGroups"
|
|
},
|
|
{
|
|
"field": "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceId",
|
|
"exists": "false"
|
|
},
|
|
{
|
|
"field": "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceKey",
|
|
"exists": "false"
|
|
}
|
|
]
|
|
},
|
|
"then": {
|
|
"effect": "[parameters('effect')]",
|
|
"details": [
|
|
{
|
|
"field": "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceId",
|
|
"value": "[parameters('workspaceId')]"
|
|
},
|
|
{
|
|
"field": "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceKey",
|
|
"value": "[parameters('workspaceKey')]"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
cases:
|
|
# =========================================================================
|
|
# Both diagnostics fields missing → append
|
|
# =========================================================================
|
|
|
|
- note: append_both_missing
|
|
resource:
|
|
type: "Microsoft.ContainerInstance/containerGroups"
|
|
name: "cg-no-diag"
|
|
properties: {}
|
|
parameters:
|
|
workspaceId: "workspace-guid-123"
|
|
workspaceKey: "workspace-key-abc"
|
|
want_effect: "Append"
|
|
want_details:
|
|
- field: "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceId"
|
|
value: "workspace-guid-123"
|
|
- field: "Microsoft.ContainerInstance/containerGroups/diagnostics.logAnalytics.workspaceKey"
|
|
value: "workspace-key-abc"
|
|
|
|
- note: append_diagnostics_empty
|
|
resource:
|
|
type: "Microsoft.ContainerInstance/containerGroups"
|
|
name: "cg-empty-diag"
|
|
properties:
|
|
diagnostics: {}
|
|
parameters:
|
|
workspaceId: "ws-id"
|
|
workspaceKey: "ws-key"
|
|
want_effect: "Append"
|
|
|
|
# =========================================================================
|
|
# One or both fields present → pass
|
|
# =========================================================================
|
|
|
|
- note: pass_workspace_id_present
|
|
resource:
|
|
type: "Microsoft.ContainerInstance/containerGroups"
|
|
name: "cg-has-id"
|
|
properties:
|
|
diagnostics:
|
|
logAnalytics:
|
|
workspaceId: "existing-id"
|
|
parameters:
|
|
workspaceId: "ws-id"
|
|
workspaceKey: "ws-key"
|
|
want_undefined: true
|
|
|
|
- note: pass_workspace_key_present
|
|
resource:
|
|
type: "Microsoft.ContainerInstance/containerGroups"
|
|
name: "cg-has-key"
|
|
properties:
|
|
diagnostics:
|
|
logAnalytics:
|
|
workspaceKey: "existing-key"
|
|
parameters:
|
|
workspaceId: "ws-id"
|
|
workspaceKey: "ws-key"
|
|
want_undefined: true
|
|
|
|
- note: pass_both_present
|
|
resource:
|
|
type: "Microsoft.ContainerInstance/containerGroups"
|
|
name: "cg-full-diag"
|
|
properties:
|
|
diagnostics:
|
|
logAnalytics:
|
|
workspaceId: "existing-id"
|
|
workspaceKey: "existing-key"
|
|
parameters:
|
|
workspaceId: "ws-id"
|
|
workspaceKey: "ws-key"
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# Wrong type
|
|
# =========================================================================
|
|
|
|
- note: pass_wrong_type
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "not-container"
|
|
properties: {}
|
|
parameters:
|
|
workspaceId: "ws-id"
|
|
workspaceKey: "ws-key"
|
|
want_undefined: true
|