mirror of
https://github.com/opentofu/opentofu.git
synced 2024-12-28 18:01:01 -06:00
ac03d35997
* jsonplan and jsonstate: include sensitive_values in state representations A sensitive_values field has been added to the resource in state and planned values which is a map of all sensitive attributes with the values set to true. It wasn't entirely clear to me if the values in state would suffice, or if we also need to consult the schema - I believe that this is sufficient for state files written since v0.15, and if that's incorrect or insufficient, I'll add in the provider schema check as well. I also updated the documentation, and, since we've considered this before, bumped the FormatVersions for both jsonstate and jsonplan.
874 lines
22 KiB
Go
874 lines
22 KiB
Go
package jsonstate
|
|
|
|
import (
|
|
"encoding/json"
|
|
"reflect"
|
|
"testing"
|
|
|
|
"github.com/google/go-cmp/cmp"
|
|
"github.com/hashicorp/terraform/internal/addrs"
|
|
"github.com/hashicorp/terraform/internal/configs/configschema"
|
|
"github.com/hashicorp/terraform/internal/states"
|
|
"github.com/hashicorp/terraform/internal/terraform"
|
|
"github.com/zclconf/go-cty/cty"
|
|
)
|
|
|
|
func TestMarshalOutputs(t *testing.T) {
|
|
tests := []struct {
|
|
Outputs map[string]*states.OutputValue
|
|
Want map[string]output
|
|
Err bool
|
|
}{
|
|
{
|
|
nil,
|
|
nil,
|
|
false,
|
|
},
|
|
{
|
|
map[string]*states.OutputValue{
|
|
"test": {
|
|
Sensitive: true,
|
|
Value: cty.StringVal("sekret"),
|
|
},
|
|
},
|
|
map[string]output{
|
|
"test": {
|
|
Sensitive: true,
|
|
Value: json.RawMessage(`"sekret"`),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
{
|
|
map[string]*states.OutputValue{
|
|
"test": {
|
|
Sensitive: false,
|
|
Value: cty.StringVal("not_so_sekret"),
|
|
},
|
|
},
|
|
map[string]output{
|
|
"test": {
|
|
Sensitive: false,
|
|
Value: json.RawMessage(`"not_so_sekret"`),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
got, err := marshalOutputs(test.Outputs)
|
|
if test.Err {
|
|
if err == nil {
|
|
t.Fatal("succeeded; want error")
|
|
}
|
|
return
|
|
} else if err != nil {
|
|
t.Fatalf("unexpected error: %s", err)
|
|
}
|
|
eq := reflect.DeepEqual(got, test.Want)
|
|
if !eq {
|
|
// printing the output isn't terribly useful, but it does help indicate which test case failed
|
|
t.Fatalf("wrong result:\nGot: %#v\nWant: %#v\n", got, test.Want)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestMarshalAttributeValues(t *testing.T) {
|
|
tests := []struct {
|
|
Attr cty.Value
|
|
Want attributeValues
|
|
}{
|
|
{
|
|
cty.NilVal,
|
|
nil,
|
|
},
|
|
{
|
|
cty.NullVal(cty.String),
|
|
nil,
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"foo": cty.StringVal("bar"),
|
|
}),
|
|
attributeValues{"foo": json.RawMessage(`"bar"`)},
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"foo": cty.NullVal(cty.String),
|
|
}),
|
|
attributeValues{"foo": json.RawMessage(`null`)},
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"bar": cty.MapVal(map[string]cty.Value{
|
|
"hello": cty.StringVal("world"),
|
|
}),
|
|
"baz": cty.ListVal([]cty.Value{
|
|
cty.StringVal("goodnight"),
|
|
cty.StringVal("moon"),
|
|
}),
|
|
}),
|
|
attributeValues{
|
|
"bar": json.RawMessage(`{"hello":"world"}`),
|
|
"baz": json.RawMessage(`["goodnight","moon"]`),
|
|
},
|
|
},
|
|
// Marked values
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"bar": cty.MapVal(map[string]cty.Value{
|
|
"hello": cty.StringVal("world"),
|
|
}),
|
|
"baz": cty.ListVal([]cty.Value{
|
|
cty.StringVal("goodnight"),
|
|
cty.StringVal("moon").Mark("sensitive"),
|
|
}),
|
|
}),
|
|
attributeValues{
|
|
"bar": json.RawMessage(`{"hello":"world"}`),
|
|
"baz": json.RawMessage(`["goodnight","moon"]`),
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
got := marshalAttributeValues(test.Attr)
|
|
eq := reflect.DeepEqual(got, test.Want)
|
|
if !eq {
|
|
t.Fatalf("wrong result:\nGot: %#v\nWant: %#v\n", got, test.Want)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestMarshalResources(t *testing.T) {
|
|
deposedKey := states.NewDeposedKey()
|
|
tests := map[string]struct {
|
|
Resources map[string]*states.Resource
|
|
Schemas *terraform.Schemas
|
|
Want []resource
|
|
Err bool
|
|
}{
|
|
"nil": {
|
|
nil,
|
|
nil,
|
|
nil,
|
|
false,
|
|
},
|
|
"single resource": {
|
|
map[string]*states.Resource{
|
|
"test_thing.baz": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.NoKey: {
|
|
Current: &states.ResourceInstanceObjectSrc{
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
[]resource{
|
|
{
|
|
Address: "test_thing.bar",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.InstanceKey(nil),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
"single resource wrong schema": {
|
|
map[string]*states.Resource{
|
|
"test_thing.baz": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.NoKey: {
|
|
Current: &states.ResourceInstanceObjectSrc{
|
|
SchemaVersion: 1,
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":["confuzles"]}`),
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
nil,
|
|
true,
|
|
},
|
|
"resource with count": {
|
|
map[string]*states.Resource{
|
|
"test_thing.bar": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.IntKey(0): {
|
|
Current: &states.ResourceInstanceObjectSrc{
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
[]resource{
|
|
{
|
|
Address: "test_thing.bar[0]",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.IntKey(0),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
"resource with for_each": {
|
|
map[string]*states.Resource{
|
|
"test_thing.bar": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.StringKey("rockhopper"): {
|
|
Current: &states.ResourceInstanceObjectSrc{
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
[]resource{
|
|
{
|
|
Address: "test_thing.bar[\"rockhopper\"]",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.StringKey("rockhopper"),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
"deposed resource": {
|
|
map[string]*states.Resource{
|
|
"test_thing.baz": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.NoKey: {
|
|
Deposed: map[states.DeposedKey]*states.ResourceInstanceObjectSrc{
|
|
states.DeposedKey(deposedKey): {
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
[]resource{
|
|
{
|
|
Address: "test_thing.bar",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.InstanceKey(nil),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
DeposedKey: deposedKey.String(),
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
"deposed and current resource": {
|
|
map[string]*states.Resource{
|
|
"test_thing.baz": {
|
|
Addr: addrs.AbsResource{
|
|
Resource: addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
},
|
|
},
|
|
Instances: map[addrs.InstanceKey]*states.ResourceInstance{
|
|
addrs.NoKey: {
|
|
Deposed: map[states.DeposedKey]*states.ResourceInstanceObjectSrc{
|
|
states.DeposedKey(deposedKey): {
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
Current: &states.ResourceInstanceObjectSrc{
|
|
Status: states.ObjectReady,
|
|
AttrsJSON: []byte(`{"woozles":"confuzles"}`),
|
|
},
|
|
},
|
|
},
|
|
ProviderConfig: addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
},
|
|
},
|
|
testSchemas(),
|
|
[]resource{
|
|
{
|
|
Address: "test_thing.bar",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.InstanceKey(nil),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
{
|
|
Address: "test_thing.bar",
|
|
Mode: "managed",
|
|
Type: "test_thing",
|
|
Name: "bar",
|
|
Index: addrs.InstanceKey(nil),
|
|
ProviderName: "registry.terraform.io/hashicorp/test",
|
|
DeposedKey: deposedKey.String(),
|
|
AttributeValues: attributeValues{
|
|
"foozles": json.RawMessage(`null`),
|
|
"woozles": json.RawMessage(`"confuzles"`),
|
|
},
|
|
SensitiveValues: json.RawMessage("{}"),
|
|
},
|
|
},
|
|
false,
|
|
},
|
|
}
|
|
|
|
for name, test := range tests {
|
|
t.Run(name, func(t *testing.T) {
|
|
got, err := marshalResources(test.Resources, addrs.RootModuleInstance, test.Schemas)
|
|
if test.Err {
|
|
if err == nil {
|
|
t.Fatal("succeeded; want error")
|
|
}
|
|
return
|
|
} else if err != nil {
|
|
t.Fatalf("unexpected error: %s", err)
|
|
}
|
|
|
|
diff := cmp.Diff(got, test.Want)
|
|
if diff != "" {
|
|
t.Fatalf("wrong result: %s\n", diff)
|
|
}
|
|
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestMarshalModules_basic(t *testing.T) {
|
|
childModule, _ := addrs.ParseModuleInstanceStr("module.child")
|
|
subModule, _ := addrs.ParseModuleInstanceStr("module.submodule")
|
|
testState := states.BuildState(func(s *states.SyncState) {
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(addrs.RootModuleInstance),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"bar","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
)
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(childModule),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"foo","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: childModule.Module(),
|
|
},
|
|
)
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(subModule),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"foo","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: subModule.Module(),
|
|
},
|
|
)
|
|
})
|
|
moduleMap := make(map[string][]addrs.ModuleInstance)
|
|
moduleMap[""] = []addrs.ModuleInstance{childModule, subModule}
|
|
|
|
got, err := marshalModules(testState, testSchemas(), moduleMap[""], moduleMap)
|
|
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %s", err.Error())
|
|
}
|
|
|
|
if len(got) != 2 {
|
|
t.Fatalf("wrong result! got %d modules, expected 2", len(got))
|
|
}
|
|
|
|
if got[0].Address != "module.child" || got[1].Address != "module.submodule" {
|
|
t.Fatalf("wrong result! got %#v\n", got)
|
|
}
|
|
|
|
}
|
|
|
|
func TestMarshalModules_nested(t *testing.T) {
|
|
childModule, _ := addrs.ParseModuleInstanceStr("module.child")
|
|
subModule, _ := addrs.ParseModuleInstanceStr("module.child.module.submodule")
|
|
testState := states.BuildState(func(s *states.SyncState) {
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(addrs.RootModuleInstance),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"bar","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
)
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(childModule),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"foo","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: childModule.Module(),
|
|
},
|
|
)
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(subModule),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"foo","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: subModule.Module(),
|
|
},
|
|
)
|
|
})
|
|
moduleMap := make(map[string][]addrs.ModuleInstance)
|
|
moduleMap[""] = []addrs.ModuleInstance{childModule}
|
|
moduleMap[childModule.String()] = []addrs.ModuleInstance{subModule}
|
|
|
|
got, err := marshalModules(testState, testSchemas(), moduleMap[""], moduleMap)
|
|
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %s", err.Error())
|
|
}
|
|
|
|
if len(got) != 1 {
|
|
t.Fatalf("wrong result! got %d modules, expected 1", len(got))
|
|
}
|
|
|
|
if got[0].Address != "module.child" {
|
|
t.Fatalf("wrong result! got %#v\n", got)
|
|
}
|
|
|
|
if got[0].ChildModules[0].Address != "module.child.module.submodule" {
|
|
t.Fatalf("wrong result! got %#v\n", got)
|
|
}
|
|
}
|
|
|
|
func TestMarshalModules_parent_no_resources(t *testing.T) {
|
|
subModule, _ := addrs.ParseModuleInstanceStr("module.child.module.submodule")
|
|
testState := states.BuildState(func(s *states.SyncState) {
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(addrs.RootModuleInstance),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"bar","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: addrs.RootModule,
|
|
},
|
|
)
|
|
s.SetResourceInstanceCurrent(
|
|
addrs.Resource{
|
|
Mode: addrs.ManagedResourceMode,
|
|
Type: "test_instance",
|
|
Name: "foo",
|
|
}.Instance(addrs.NoKey).Absolute(subModule),
|
|
&states.ResourceInstanceObjectSrc{
|
|
AttrsJSON: []byte(`{"id":"foo","foo":"value","bar":"value"}`),
|
|
Status: states.ObjectReady,
|
|
},
|
|
addrs.AbsProviderConfig{
|
|
Provider: addrs.NewDefaultProvider("test"),
|
|
Module: subModule.Module(),
|
|
},
|
|
)
|
|
})
|
|
got, err := marshalRootModule(testState, testSchemas())
|
|
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %s", err.Error())
|
|
}
|
|
|
|
if len(got.ChildModules) != 1 {
|
|
t.Fatalf("wrong result! got %d modules, expected 1", len(got.ChildModules))
|
|
}
|
|
|
|
if got.ChildModules[0].Address != "module.child" {
|
|
t.Fatalf("wrong result! got %#v\n", got)
|
|
}
|
|
|
|
if got.ChildModules[0].ChildModules[0].Address != "module.child.module.submodule" {
|
|
t.Fatalf("wrong result! got %#v\n", got)
|
|
}
|
|
}
|
|
|
|
func testSchemas() *terraform.Schemas {
|
|
return &terraform.Schemas{
|
|
Providers: map[addrs.Provider]*terraform.ProviderSchema{
|
|
addrs.NewDefaultProvider("test"): {
|
|
ResourceTypes: map[string]*configschema.Block{
|
|
"test_thing": {
|
|
Attributes: map[string]*configschema.Attribute{
|
|
"woozles": {Type: cty.String, Optional: true, Computed: true},
|
|
"foozles": {Type: cty.String, Optional: true, Sensitive: true},
|
|
},
|
|
},
|
|
"test_instance": {
|
|
Attributes: map[string]*configschema.Attribute{
|
|
"id": {Type: cty.String, Optional: true, Computed: true},
|
|
"foo": {Type: cty.String, Optional: true},
|
|
"bar": {Type: cty.String, Optional: true},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func TestSensitiveAsBool(t *testing.T) {
|
|
sensitive := "sensitive"
|
|
tests := []struct {
|
|
Input cty.Value
|
|
Want cty.Value
|
|
}{
|
|
{
|
|
cty.StringVal("hello"),
|
|
cty.False,
|
|
},
|
|
{
|
|
cty.NullVal(cty.String),
|
|
cty.False,
|
|
},
|
|
{
|
|
cty.StringVal("hello").Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.NullVal(cty.String).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
|
|
{
|
|
cty.NullVal(cty.DynamicPseudoType).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.NullVal(cty.Object(map[string]cty.Type{"test": cty.String})),
|
|
cty.False,
|
|
},
|
|
{
|
|
cty.NullVal(cty.Object(map[string]cty.Type{"test": cty.String})).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.DynamicVal,
|
|
cty.False,
|
|
},
|
|
{
|
|
cty.DynamicVal.Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
|
|
{
|
|
cty.ListValEmpty(cty.String),
|
|
cty.EmptyTupleVal,
|
|
},
|
|
{
|
|
cty.ListValEmpty(cty.String).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.ListVal([]cty.Value{
|
|
cty.StringVal("hello"),
|
|
cty.StringVal("friend").Mark(sensitive),
|
|
}),
|
|
cty.TupleVal([]cty.Value{
|
|
cty.False,
|
|
cty.True,
|
|
}),
|
|
},
|
|
{
|
|
cty.SetValEmpty(cty.String),
|
|
cty.EmptyTupleVal,
|
|
},
|
|
{
|
|
cty.SetValEmpty(cty.String).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.SetVal([]cty.Value{cty.StringVal("hello")}),
|
|
cty.TupleVal([]cty.Value{cty.False}),
|
|
},
|
|
{
|
|
cty.SetVal([]cty.Value{cty.StringVal("hello").Mark(sensitive)}),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.EmptyTupleVal.Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.TupleVal([]cty.Value{
|
|
cty.StringVal("hello"),
|
|
cty.StringVal("friend").Mark(sensitive),
|
|
}),
|
|
cty.TupleVal([]cty.Value{
|
|
cty.False,
|
|
cty.True,
|
|
}),
|
|
},
|
|
{
|
|
cty.MapValEmpty(cty.String),
|
|
cty.EmptyObjectVal,
|
|
},
|
|
{
|
|
cty.MapValEmpty(cty.String).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.MapVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse"),
|
|
}),
|
|
cty.EmptyObjectVal,
|
|
},
|
|
{
|
|
cty.MapVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse").Mark(sensitive),
|
|
}),
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"animal": cty.True,
|
|
}),
|
|
},
|
|
{
|
|
cty.MapVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse").Mark(sensitive),
|
|
}).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.EmptyObjectVal,
|
|
cty.EmptyObjectVal,
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse"),
|
|
}),
|
|
cty.EmptyObjectVal,
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse").Mark(sensitive),
|
|
}),
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"animal": cty.True,
|
|
}),
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"greeting": cty.StringVal("hello"),
|
|
"animal": cty.StringVal("horse").Mark(sensitive),
|
|
}).Mark(sensitive),
|
|
cty.True,
|
|
},
|
|
{
|
|
cty.ListVal([]cty.Value{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"a": cty.UnknownVal(cty.String),
|
|
}),
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"a": cty.StringVal("known").Mark(sensitive),
|
|
}),
|
|
}),
|
|
cty.TupleVal([]cty.Value{
|
|
cty.EmptyObjectVal,
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"a": cty.True,
|
|
}),
|
|
}),
|
|
},
|
|
{
|
|
cty.ListVal([]cty.Value{
|
|
cty.MapValEmpty(cty.String),
|
|
cty.MapVal(map[string]cty.Value{
|
|
"a": cty.StringVal("known").Mark(sensitive),
|
|
}),
|
|
cty.MapVal(map[string]cty.Value{
|
|
"a": cty.UnknownVal(cty.String),
|
|
}),
|
|
}),
|
|
cty.TupleVal([]cty.Value{
|
|
cty.EmptyObjectVal,
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"a": cty.True,
|
|
}),
|
|
cty.EmptyObjectVal,
|
|
}),
|
|
},
|
|
{
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"list": cty.UnknownVal(cty.List(cty.String)),
|
|
"set": cty.UnknownVal(cty.Set(cty.Bool)),
|
|
"tuple": cty.UnknownVal(cty.Tuple([]cty.Type{cty.String, cty.Number})),
|
|
"map": cty.UnknownVal(cty.Map(cty.String)),
|
|
"object": cty.UnknownVal(cty.Object(map[string]cty.Type{"a": cty.String})),
|
|
}),
|
|
cty.ObjectVal(map[string]cty.Value{
|
|
"list": cty.EmptyTupleVal,
|
|
"set": cty.EmptyTupleVal,
|
|
"tuple": cty.EmptyTupleVal,
|
|
"map": cty.EmptyObjectVal,
|
|
"object": cty.EmptyObjectVal,
|
|
}),
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
got := SensitiveAsBool(test.Input)
|
|
if !reflect.DeepEqual(got, test.Want) {
|
|
t.Errorf(
|
|
"wrong result\ninput: %#v\ngot: %#v\nwant: %#v",
|
|
test.Input, got, test.Want,
|
|
)
|
|
}
|
|
}
|
|
}
|