feat: label policy (#1708)

* feat: label policy proto extension * feat: label policy and activate event * feat: label policy asset events * feat: label policy asset commands * feat: add storage key * feat: storage key validation * feat: label policy asset tests * feat: label policy query side * feat: avatar * feat: avatar event * feat: human avatar * feat: avatar read side * feat: font on iam label policy * feat: label policy font * feat: possiblity to create bucket on put file * uplaoder * login policy logo * set bucket prefix * feat: avatar upload * feat: avatar upload * feat: use assets on command side * feat: fix human avatar removed event * feat: remove human avatar * feat: mock asset storage * feat: remove human avatar * fix(operator): add configuration of asset storage to zitadel operator * feat(console): private labeling policy (#1697) * private labeling component, routing, preview * font, colors, upload, i18n * show logo * fix: uniqueness (#1710) * fix: uniqueconstraint to lower * feat: change org * feat: org change test * feat: change org * fix: tests * fix: handle domain claims correctly * feat: update org Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> * fix: handle domain claimed event correctly for service users (#1711) * fix: handle domain claimed event correctly on user view * fix: ignore domain claimed events for email notifications * fix: change org * handle org changed in read models correctly * fix: change org in user grant handler Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> * fix: correct value (#1695) * docs(api): correct link (#1712) * upload service Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> Co-authored-by: Florian Forster <florian@caos.ch> * feat: fix tests, * feat: remove assets from label policy * fix npm, set environment * lint ts * remove stylelinting * fix(operator): add mapping for console with changed unit tests * fix(operator): add secrets as env variables to pod * feat: remove human avatar * fix(operator): add secrets as env variables to pod * feat: map label policy * feat: labelpolicy, admin, mgmt, adv settings (#1715) * fetch label policy, mgmt, admin service * feat: advanced beh, links, add, update * lint ts * feat: watermark * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: custom css * css * css * css * css * css * getobject * feat: dynamic handler * feat: varibale css * content info * css overwrite * feat: variablen css * feat: generate css file * feat: dark mode * feat: dark mode * fix logo css * feat: upload logos * dark mode with cookie * feat: handle images in login * avatar css and begin font * feat: avatar * feat: user avatar * caching of static assets in login * add avatar.js to main.html * feat: header dont show logo if no url * feat: label policy colors * feat: mock asset storage * feat: mock asset storage * feat: fix tests * feat: user avatar * feat: header logo * avatar * avatar * make it compatible with go 1.15 * feat: remove unused logos * fix handler * fix: styling error handling * fonts * fix: download func * switch to mux * fix: change upload api to assets * fix build * fix: download avatar * fix: download logos * fix: my avatar * font * fix: remove error msg popup possibility * fix: docs * fix: svalidate colors * rem msg popup from frontend * fix: email with private labeling * fix: tests * fix: email templates * fix: change migration version * fix: fix duplicate imports * fix(console): assets, service url, upload, policy current and preview (#1781) * upload endpoint, layout * fetch current, preview, fix upload * cleanup private labeling * fix linting * begin generated asset handler * generate asset api in dockerfile * features for label policy * features for label policy * features * flag for asset generator * change asset generator flag * fix label policy view in grpc * fix: layout, activate policy (#1786) * theme switcher up on top * change layout * activate policy * feat(console): label policy back color, layout (#1788) * theme switcher up on top * change layout * activate policy * fix overwrite value fc * reset policy, reset service * autosave policy, preview desc, layout impv * layout, i18n * background colors, inject material styles * load images * clean, lint * fix layout * set custom hex * fix content size conversion * remove font format in generated css * fix features for assets * fix(console): label policy colors, image downloads, preview (#1804) * load images * colors, images binding * lint * refresh emitter * lint * propagate font colors * upload error handling * label policy feature check * add blob in csp for console * log * fix: feature edits for label policy, refresh state on upload (#1807) * show error on load image, stop spinner * fix merge * fix migration versions * fix assets * fix csp * fix background color * scss * fix build * lint scss * fix statik for console * fix features check for label policy * cleanup * lint * public links * fix notifications * public links * feat: merge main * feat: fix translation files * fix migration * set api domain * fix logo in email * font face in email * font face in email * validate assets on upload * cleanup * add missing translations * add missing translations Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Stefan Benz <stefan@caos.ch> Co-authored-by: Max Peintner <max@caos.ch> Co-authored-by: Florian Forster <florian@caos.ch>
2025-08-11 21:37:32 +00:00 · 2021-06-04 14:53:51 +02:00
parent c0d9d86b09
commit 73d37459bb
257 changed files with 18248 additions and 7178 deletions
--- a/internal/domain/asset.go
+++ b/internal/domain/asset.go
@@ -2,6 +2,25 @@ package domain

 import "time"

+const (
+	UsersAssetPath  = "users"
+	AvatarAssetPath = "/avatar"
+
+	policyPrefix          = "policy"
+	LabelPolicyPrefix     = policyPrefix + "/label"
+	labelPolicyLogoPrefix = LabelPolicyPrefix + "/logo"
+	labelPolicyIconPrefix = LabelPolicyPrefix + "/icon"
+	labelPolicyFontPrefix = LabelPolicyPrefix + "/font"
+	Dark                  = "dark"
+
+	CssPath              = LabelPolicyPrefix + "/css"
+	CssVariablesFileName = "variables.css"
+
+	LabelPolicyLogoPath = labelPolicyLogoPrefix
+	LabelPolicyIconPath = labelPolicyIconPrefix
+	LabelPolicyFontPath = labelPolicyFontPrefix
+)
+
 type AssetInfo struct {
 	Bucket          string
 	Key             string
@@ -12,4 +31,9 @@ type AssetInfo struct {
 	VersionID       string
 	Expiration      time.Time
 	AutheticatedURL string
+	ContentType     string
+}
+
+func GetHumanAvatarAssetPath(userID string) string {
+	return UsersAssetPath + "/" + userID + AvatarAssetPath
 }
--- a/internal/domain/auth_request.go
+++ b/internal/domain/auth_request.go
@@ -30,6 +30,8 @@ type AuthRequest struct {
 	UserName               string
 	LoginName              string
 	DisplayName            string
+	AvatarKey              string
+	PresignedAvatar        string
 	UserOrgID              string
 	RequestedOrgID         string
 	RequestedOrgName       string
@@ -108,11 +110,12 @@ func (a *AuthRequest) WithCurrentInfo(info *BrowserInfo) *AuthRequest {
 	return a
 }

-func (a *AuthRequest) SetUserInfo(userID, userName, loginName, displayName, userOrgID string) {
+func (a *AuthRequest) SetUserInfo(userID, userName, loginName, displayName, avatar, userOrgID string) {
 	a.UserID = userID
 	a.UserName = userName
 	a.LoginName = loginName
 	a.DisplayName = displayName
+	a.AvatarKey = avatar
 	a.UserOrgID = userOrgID
 }

--- a/internal/domain/features.go
+++ b/internal/domain/features.go
@@ -16,6 +16,8 @@ const (
 	FeatureLoginPolicyPasswordReset = FeatureLoginPolicy + ".password_reset"
 	FeaturePasswordComplexityPolicy = "password_complexity_policy"
 	FeatureLabelPolicy              = "label_policy"
+	FeatureLabelPolicyPrivateLabel  = FeatureLabelPolicy + ".private_label"
+	FeatureLabelPolicyWatermark     = FeatureLabelPolicy + ".watermark"
 	FeatureCustomDomain             = "custom_domain"
 )

@@ -36,7 +38,8 @@ type Features struct {
 	LoginPolicyUsernameLogin bool
 	LoginPolicyPasswordReset bool
 	PasswordComplexityPolicy bool
-	LabelPolicy              bool
+	LabelPolicyPrivateLabel  bool
+	LabelPolicyWatermark     bool
 	CustomDomain             bool
 }

--- a/internal/domain/next_step.go
+++ b/internal/domain/next_step.go
@@ -47,6 +47,7 @@ type UserSelection struct {
 	LoginName         string
 	UserSessionState  UserSessionState
 	SelectionPossible bool
+	AvatarKey         string
 }

 type UserSessionState int32
--- a/internal/domain/policy_label.go
+++ b/internal/domain/policy_label.go
@@ -1,18 +1,84 @@
 package domain

 import (
+	"regexp"
+
+	caos_errs "github.com/caos/zitadel/internal/errors"
 	"github.com/caos/zitadel/internal/eventstore/v1/models"
 )

+var colorRegex = regexp.MustCompile("^$|^#([A-Fa-f0-9]{6}|[A-Fa-f0-9]{3})$")
+
 type LabelPolicy struct {
 	models.ObjectRoot

-	Default             bool
-	PrimaryColor        string
-	SecondaryColor      string
+	State   LabelPolicyState
+	Default bool
+
+	PrimaryColor    string
+	BackgroundColor string
+	WarnColor       string
+	FontColor       string
+	LogoURL         string
+	IconURL         string
+
+	PrimaryColorDark    string
+	BackgroundColorDark string
+	WarnColorDark       string
+	FontColorDark       string
+	LogoDarkURL         string
+	IconDarkURL         string
+
+	Font string
+
 	HideLoginNameSuffix bool
+	ErrorMsgPopup       bool
+	DisableWatermark    bool
 }

-func (p *LabelPolicy) IsValid() bool {
-	return p.PrimaryColor != "" && p.SecondaryColor != ""
+type LabelPolicyState int32
+
+const (
+	LabelPolicyStateUnspecified LabelPolicyState = iota
+	LabelPolicyStateActive
+	LabelPolicyStateRemoved
+	LabelPolicyStatePreview
+
+	labelPolicyStateCount
+)
+
+func (f LabelPolicy) IsValid() error {
+	if !colorRegex.MatchString(f.PrimaryColor) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-391dG", "Errors.Policy.Label.Invalid.PrimaryColor")
+	}
+	if !colorRegex.MatchString(f.BackgroundColor) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-502F1", "Errors.Policy.Label.Invalid.BackgroundColor")
+	}
+	if !colorRegex.MatchString(f.WarnColor) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-nvw33", "Errors.Policy.Label.Invalid.WarnColor")
+	}
+	if !colorRegex.MatchString(f.FontColor) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-93mSf", "Errors.Policy.Label.Invalid.FontColor")
+	}
+	if !colorRegex.MatchString(f.PrimaryColorDark) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-391dG", "Errors.Policy.Label.Invalid.PrimaryColorDark")
+	}
+	if !colorRegex.MatchString(f.BackgroundColorDark) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-llsp2", "Errors.Policy.Label.Invalid.BackgroundColorDark")
+	}
+	if !colorRegex.MatchString(f.WarnColorDark) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-2b6sf", "Errors.Policy.Label.Invalid.WarnColorDark")
+	}
+	if !colorRegex.MatchString(f.FontColorDark) {
+		return caos_errs.ThrowInvalidArgument(nil, "POLICY-3M0fs", "Errors.Policy.Label.Invalid.FontColorDark")
+	}
+	return nil
+}
+
+func (f LabelPolicyState) Valid() bool {
+	return f >= 0 && f < labelPolicyStateCount
+}
+
+func (s LabelPolicyState) Exists() bool {
+	return s != LabelPolicyStateUnspecified && s != LabelPolicyStateRemoved
 }
--- a/internal/domain/policy_label_test.go
+++ b/internal/domain/policy_label_test.go
@@ -0,0 +1,505 @@
+package domain
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+
+	caos_errs "github.com/caos/zitadel/internal/errors"
+)
+
+func TestLabelPolicyPrimaryColorValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty primary, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyBackgroundColorValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty background, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyWarnColorValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty warn, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyFontColorValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty font, valid",
+			args: args{
+				policy: &LabelPolicy{FontColor: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{FontColor: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{FontColor: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColor: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColor: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyPrimaryColorDarkValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty primary dark, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{PrimaryColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyBackgroundColorDarkValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty background dark, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{BackgroundColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyWarnColorDarkValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty warn dark, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{WarnColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
+
+func TestLabelPolicyFontColorDarkValid(t *testing.T) {
+	type args struct {
+		policy *LabelPolicy
+	}
+	tests := []struct {
+		name string
+		args args
+		err  func(error) bool
+	}{
+		{
+			name: "empty font dark, valid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: ""},
+			},
+		},
+		{
+			name: "color code with 6 characters, valid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: "#ffffff"},
+			},
+		},
+		{
+			name: "color code with 3 characters, valid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: "#000"},
+			},
+		},
+		{
+			name: "color code with wrong characters, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: "#0f9wfm"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with wrong count of characters, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+		{
+			name: "color code with no #, invalid",
+			args: args{
+				policy: &LabelPolicy{FontColorDark: "#00"},
+			},
+			err: caos_errs.IsErrorInvalidArgument,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.args.policy.IsValid()
+			if tt.err == nil {
+				assert.NoError(t, err)
+			}
+			if tt.err != nil && !tt.err(err) {
+				t.Errorf("got wrong err: %v ", err)
+			}
+		})
+	}
+}
--- a/internal/domain/step.go
+++ b/internal/domain/step.go
@@ -16,6 +16,8 @@ const (
 	Step11
 	Step12
 	Step13
+	Step14
+	Step15
 	//StepCount marks the the length of possible steps (StepCount-1 == last possible step)
 	StepCount
 )