mirror of
https://github.com/siderolabs/talos.git
synced 2025-09-19 12:51:11 +02:00
5ad314fe7e
It is not enforced yet. Refs #3421. Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
76 lines
2.4 KiB
Go
76 lines
2.4 KiB
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package backend_test
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/talos-systems/grpc-proxy/proxy"
|
|
"google.golang.org/grpc/metadata"
|
|
|
|
"github.com/talos-systems/talos/pkg/grpc/middleware/authz"
|
|
"github.com/talos-systems/talos/pkg/grpc/proxy/backend"
|
|
"github.com/talos-systems/talos/pkg/machinery/role"
|
|
)
|
|
|
|
func TestLocalInterfaces(t *testing.T) {
|
|
assert.Implements(t, (*proxy.Backend)(nil), new(backend.Local))
|
|
}
|
|
|
|
func TestLocalGetConnection(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
l := backend.NewLocal("test", "/tmp/test.sock")
|
|
|
|
md1 := metadata.New(nil)
|
|
md1.Set("key", "value1", "value2")
|
|
ctx1 := metadata.NewIncomingContext(authz.ContextWithRoles(context.Background(), role.MakeSet(role.Admin)), md1)
|
|
|
|
outCtx1, conn1, err1 := l.GetConnection(ctx1)
|
|
assert.NoError(t, err1)
|
|
assert.NotNil(t, conn1)
|
|
assert.Equal(t, role.MakeSet(role.Admin), authz.GetRoles(outCtx1))
|
|
|
|
mdOut1, ok1 := metadata.FromOutgoingContext(outCtx1)
|
|
assert.True(t, ok1)
|
|
assert.Equal(t, []string{"value1", "value2"}, mdOut1.Get("key"))
|
|
assert.Equal(t, []string{"os:admin"}, mdOut1.Get("talos-role"))
|
|
|
|
t.Run("Same context", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
ctx2 := ctx1
|
|
outCtx2, conn2, err2 := l.GetConnection(ctx2)
|
|
assert.NoError(t, err2)
|
|
assert.Equal(t, conn1, conn2) // connection is cached
|
|
assert.Equal(t, role.MakeSet(role.Admin), authz.GetRoles(outCtx2))
|
|
|
|
mdOut2, ok2 := metadata.FromOutgoingContext(outCtx2)
|
|
assert.True(t, ok2)
|
|
assert.Equal(t, []string{"value1", "value2"}, mdOut2.Get("key"))
|
|
assert.Equal(t, []string{"os:admin"}, mdOut2.Get("talos-role"))
|
|
})
|
|
|
|
t.Run("Other context", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
md3 := metadata.New(nil)
|
|
md3.Set("key", "value3", "value4")
|
|
ctx3 := metadata.NewIncomingContext(authz.ContextWithRoles(context.Background(), role.MakeSet(role.Reader)), md3)
|
|
|
|
outCtx3, conn3, err3 := l.GetConnection(ctx3)
|
|
assert.NoError(t, err3)
|
|
assert.Equal(t, conn1, conn3) // connection is cached
|
|
assert.Equal(t, role.MakeSet(role.Reader), authz.GetRoles(outCtx3))
|
|
|
|
mdOut3, ok3 := metadata.FromOutgoingContext(outCtx3)
|
|
assert.True(t, ok3)
|
|
assert.Equal(t, []string{"value3", "value4"}, mdOut3.Get("key"))
|
|
assert.Equal(t, []string{"os:reader"}, mdOut3.Get("talos-role"))
|
|
})
|
|
}
|