IntenseWebs/opentofu
3
0
Fork 0
mirror of https://github.com/opentofu/opentofu.git synced 2025-02-25 18:45:20 -06:00
Code Issues Packages Projects Releases Wiki Activity

Adds endpoint tests when configured in configuration

Browse Source
This commit is contained in:
Graham Davison 2023-07-06 15:00:02 -07:00
parent 90c10ebbe9
commit 2f00c86255
2 changed files with 94 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
internal/backend/remote-state/s3/backend.go
View File

@ -334,7 +334,6 @@ func (b *Backend) Configure(obj cty.Value) tfdiags.Diagnostics {
b.kmsKeyID = stringAttr(obj, "kms_key_id") b.kmsKeyID = stringAttr(obj, "kms_key_id")
b.ddbTable = stringAttr(obj, "dynamodb_table") b.ddbTable = stringAttr(obj, "dynamodb_table")
// WarnOnEmptyString(), LenEquals(44), IsBase64Encoded()
if customerKey, ok := stringAttrOk(obj, "sse_customer_key"); ok { if customerKey, ok := stringAttrOk(obj, "sse_customer_key"); ok {
if len(customerKey) != 44 { if len(customerKey) != 44 {
diags = diags.Append(tfdiags.AttributeValue( diags = diags.Append(tfdiags.AttributeValue(

97
internal/backend/remote-state/s3/backend_test.go
View File

@ -195,7 +195,7 @@ func TestBackendConfig_RegionEnvVar(t *testing.T) {
} }
} }
func TestBackendConfig_DynamoDBEndpoint(t *testing.T) { func TestBackendConfig_DynamoDBEndpointEnvVar(t *testing.T) {
testACC(t) testACC(t)
config := map[string]interface{}{ config := map[string]interface{}{
"region": "us-west-1", "region": "us-west-1",
@ -220,7 +220,21 @@ func TestBackendConfig_DynamoDBEndpoint(t *testing.T) {
checkClientEndpoint(t, b.dynClient.Config, "dynamo.test") checkClientEndpoint(t, b.dynClient.Config, "dynamo.test")
} }
func TestBackendConfig_S3Endpoint(t *testing.T) { func TestBackendConfig_DynamoDBEndpointConfig(t *testing.T) {
testACC(t)
config := map[string]interface{}{
"region": "us-west-1",
"bucket": "tf-test",
"key": "state",
"dynamodb_endpoint": "dynamo.test",
}
b := backend.TestBackendConfig(t, New(), backend.TestWrapConfig(config)).(*Backend)
checkClientEndpoint(t, b.dynClient.Config, "dynamo.test")
}
func TestBackendConfig_S3EndpointEnvVar(t *testing.T) {
testACC(t) testACC(t)
config := map[string]interface{}{ config := map[string]interface{}{
"region": "us-west-1", "region": "us-west-1",
@ -245,7 +259,21 @@ func TestBackendConfig_S3Endpoint(t *testing.T) {
checkClientEndpoint(t, b.s3Client.Config, "s3.test") checkClientEndpoint(t, b.s3Client.Config, "s3.test")
} }
func TestBackendConfig_STSEndpoint(t *testing.T) { func TestBackendConfig_S3EndpointConfig(t *testing.T) {
testACC(t)
config := map[string]interface{}{
"region": "us-west-1",
"bucket": "tf-test",
"key": "state",
"endpoint": "s3.test",
}
b := backend.TestBackendConfig(t, New(), backend.TestWrapConfig(config)).(*Backend)
checkClientEndpoint(t, b.s3Client.Config, "s3.test")
}
func TestBackendConfig_STSEndpointEnvVar(t *testing.T) {
testACC(t) testACC(t)
testCases := []struct { testCases := []struct {
@ -311,6 +339,69 @@ func TestBackendConfig_STSEndpoint(t *testing.T) {
} }
} }
func TestBackendConfig_STSEndpointConfig(t *testing.T) {
testACC(t)
testCases := []struct {
Config map[string]interface{}
Description string
MockStsEndpoints []*awsbase.MockEndpoint
}{
{
Config: map[string]interface{}{
"bucket": "tf-test",
"key": "state",
"region": "us-west-1",
"role_arn": awsbase.MockStsAssumeRoleArn,
"session_name": awsbase.MockStsAssumeRoleSessionName,
},
Description: "role_arn",
MockStsEndpoints: []*awsbase.MockEndpoint{
{
Request: &awsbase.MockRequest{Method: "POST", Uri: "/", Body: url.Values{
"Action": []string{"AssumeRole"},
"DurationSeconds": []string{"900"},
"RoleArn": []string{awsbase.MockStsAssumeRoleArn},
"RoleSessionName": []string{awsbase.MockStsAssumeRoleSessionName},
"Version": []string{"2011-06-15"},
}.Encode()},
Response: &awsbase.MockResponse{StatusCode: 200, Body: awsbase.MockStsAssumeRoleValidResponseBody, ContentType: "text/xml"},
},
{
Request: &awsbase.MockRequest{Method: "POST", Uri: "/", Body: mockStsGetCallerIdentityRequestBody},
Response: &awsbase.MockResponse{StatusCode: 200, Body: awsbase.MockStsGetCallerIdentityValidResponseBody, ContentType: "text/xml"},
},
},
},
}
for _, testCase := range testCases {
testCase := testCase
t.Run(testCase.Description, func(t *testing.T) {
closeSts, mockStsSession, err := awsbase.GetMockedAwsApiSession("STS", testCase.MockStsEndpoints)
defer closeSts()
if err != nil {
t.Fatalf("unexpected error creating mock STS server: %s", err)
}
if mockStsSession != nil && mockStsSession.Config != nil {
testCase.Config["sts_endpoint"] = aws.StringValue(mockStsSession.Config.Endpoint)
}
b := New()
diags := b.Configure(populateSchema(t, b.ConfigSchema(), hcl2shim.HCL2ValueFromConfigValue(testCase.Config)))
if diags.HasErrors() {
for _, diag := range diags {
t.Errorf("unexpected error: %s", diag.Description().Summary)
}
}
})
}
}
func TestBackendConfig_AssumeRole(t *testing.T) { func TestBackendConfig_AssumeRole(t *testing.T) {
testACC(t) testACC(t)