mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 23:21:08 +02:00
27ab988205
Add `config_mode` variant to some scenarios so we can dynamically change how we primarily configure the Vault cluster, either by a configuration file or with environment variables. As part of this change we also: * Start consuming the Enos terraform provider from public Terraform registry. * Remove the old `seal_ha_beta` variant as it is no longer required. * Add a module that performs a `vault operator step-down` so that we can force leader elections in scenarios. * Wire up an operator step-down into some scenarios to test both the old and new multiseal code paths during leader elections. Signed-off-by: Ryan Cragun <me@ryan.ec>
35 lines
1.3 KiB
HCL
35 lines
1.3 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
terraform {
|
|
required_providers {
|
|
enos = {
|
|
source = "registry.terraform.io/hashicorp-forge/enos"
|
|
}
|
|
}
|
|
}
|
|
|
|
locals {
|
|
# base test environment excludes the filter argument
|
|
ui_test_environment_base = {
|
|
VAULT_ADDR = "http://${var.vault_addr}:8200"
|
|
VAULT_TOKEN = var.vault_root_token
|
|
VAULT_UNSEAL_KEYS = jsonencode(slice(var.vault_unseal_keys, 0, var.vault_recovery_threshold))
|
|
}
|
|
ui_test_environment = var.ui_test_filter == null || try(length(trimspace(var.ui_test_filter)) == 0, true) ? local.ui_test_environment_base : merge(local.ui_test_environment_base, {
|
|
TEST_FILTER = var.ui_test_filter
|
|
})
|
|
# The environment variables need to be double escaped since the process of rendering them to the
|
|
# outputs eats the escaping. Therefore double escaping ensures that the values are rendered as
|
|
# properly escaped json, i.e. "[\"value\"]" suitable to be parsed as json.
|
|
escaped_ui_test_environment = [
|
|
for key, value in local.ui_test_environment : "export ${key}='${value}'"
|
|
]
|
|
}
|
|
|
|
resource "enos_local_exec" "test_ui" {
|
|
count = var.ui_run_tests ? 1 : 0
|
|
environment = local.ui_test_environment
|
|
scripts = ["${path.module}/scripts/test_ui.sh"]
|
|
}
|