1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
|
package data
import (
"net/url"
"testing"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/awserr"
"github.com/aws/aws-sdk-go/service/secretsmanager"
"github.com/stretchr/testify/assert"
)
// DummyAWSSecretsManagerSecretGetter - test double
type DummyAWSSecretsManagerSecretGetter struct {
t *testing.T
secretValut *secretsmanager.GetSecretValueOutput
err awserr.Error
mockGetSecretValue func(input *secretsmanager.GetSecretValueInput) (*secretsmanager.GetSecretValueOutput, error)
}
func (d DummyAWSSecretsManagerSecretGetter) GetSecretValue(input *secretsmanager.GetSecretValueInput) (*secretsmanager.GetSecretValueOutput, error) {
if d.mockGetSecretValue != nil {
output, err := d.mockGetSecretValue(input)
return output, err
}
if d.err != nil {
return nil, d.err
}
assert.NotNil(d.t, d.secretValut, "Must provide a param if no error!")
return d.secretValut, nil
}
func simpleAWSSecretsManagerSourceHelper(dummyGetter awsSecretsManagerGetter) *Source {
return &Source{
Alias: "foo",
URL: &url.URL{
Scheme: "aws+sm",
Path: "/foo",
},
awsSecretsManager: dummyGetter,
}
}
func TestAWSSecretsManager_ParseAWSSecretsManagerArgs(t *testing.T) {
_, _, err := parseDatasourceURLArgs(mustParseURL("base"), "extra", "too many!")
assert.Error(t, err)
data := []struct {
u *url.URL
args []string
expectedParams map[string]interface{}
expectedPath string
}{
{mustParseURL("noddy"), nil, nil, "noddy"},
{mustParseURL("base"), []string{"extra"}, nil, "base/extra"},
{mustParseURL("/foo/"), []string{"/extra"}, nil, "/foo/extra"},
{mustParseURL("aws+sm:///foo"), []string{"bar"}, nil, "/foo/bar"},
{mustParseURL("aws+sm:foo"), nil, nil, "foo"},
{mustParseURL("aws+sm:foo/bar"), nil, nil, "foo/bar"},
{mustParseURL("aws+sm:/foo/bar"), nil, nil, "/foo/bar"},
{mustParseURL("aws+sm:foo"), []string{"baz"}, nil, "foo/baz"},
{mustParseURL("aws+sm:foo/bar"), []string{"baz"}, nil, "foo/bar/baz"},
{mustParseURL("aws+sm:/foo/bar"), []string{"baz"}, nil, "/foo/bar/baz"},
{mustParseURL("aws+sm:///foo"), []string{"dir/"}, nil, "/foo/dir/"},
{mustParseURL("aws+sm:///foo/"), nil, nil, "/foo/"},
{mustParseURL("aws+sm:///foo/"), []string{"baz"}, nil, "/foo/baz"},
{mustParseURL("aws+sm:foo?type=text/plain"), []string{"baz"},
map[string]interface{}{"type": "text/plain"}, "foo/baz"},
{mustParseURL("aws+sm:foo/bar?type=text/plain"), []string{"baz"},
map[string]interface{}{"type": "text/plain"}, "foo/bar/baz"},
{mustParseURL("aws+sm:/foo/bar?type=text/plain"), []string{"baz"},
map[string]interface{}{"type": "text/plain"}, "/foo/bar/baz"},
{
mustParseURL("aws+sm:/foo/bar?type=text/plain"),
[]string{"baz/qux?type=application/json¶m=quux"},
map[string]interface{}{
"type": "application/json",
"param": "quux",
},
"/foo/bar/baz/qux",
},
}
for _, d := range data {
params, p, err := parseDatasourceURLArgs(d.u, d.args...)
assert.NoError(t, err)
if d.expectedParams == nil {
assert.Empty(t, params)
} else {
assert.EqualValues(t, d.expectedParams, params)
}
assert.Equal(t, d.expectedPath, p)
}
}
func TestAWSSecretsManager_GetParameterSetup(t *testing.T) {
calledOk := false
s := simpleAWSSecretsManagerSourceHelper(DummyAWSSecretsManagerSecretGetter{
t: t,
mockGetSecretValue: func(input *secretsmanager.GetSecretValueInput) (*secretsmanager.GetSecretValueOutput, error) {
assert.Equal(t, "/foo/bar", *input.SecretId)
calledOk = true
return &secretsmanager.GetSecretValueOutput{SecretString: aws.String("blub")}, nil
},
})
_, err := readAWSSecretsManager(s, "/bar")
assert.True(t, calledOk)
assert.Nil(t, err)
}
func TestAWSSecretsManager_GetParameterSetupWrongArgs(t *testing.T) {
calledOk := false
s := simpleAWSSecretsManagerSourceHelper(DummyAWSSecretsManagerSecretGetter{
t: t,
mockGetSecretValue: func(input *secretsmanager.GetSecretValueInput) (*secretsmanager.GetSecretValueOutput, error) {
assert.Equal(t, "/foo/bar", *input.SecretId)
calledOk = true
return &secretsmanager.GetSecretValueOutput{SecretString: aws.String("blub")}, nil
},
})
_, err := readAWSSecretsManager(s, "/bar", "/foo", "/bla")
assert.False(t, calledOk)
assert.Error(t, err)
}
func TestAWSSecretsManager_GetParameterMissing(t *testing.T) {
expectedErr := awserr.New("ParameterNotFound", "Test of error message", nil)
s := simpleAWSSecretsManagerSourceHelper(DummyAWSSecretsManagerSecretGetter{
t: t,
err: expectedErr,
})
_, err := readAWSSecretsManager(s, "")
assert.Error(t, err, "Test of error message")
}
func TestAWSSecretsManager_ReadSecret(t *testing.T) {
calledOk := false
s := simpleAWSSecretsManagerSourceHelper(DummyAWSSecretsManagerSecretGetter{
t: t,
mockGetSecretValue: func(input *secretsmanager.GetSecretValueInput) (*secretsmanager.GetSecretValueOutput, error) {
assert.Equal(t, "/foo/bar", *input.SecretId)
calledOk = true
return &secretsmanager.GetSecretValueOutput{SecretString: aws.String("blub")}, nil
},
})
output, err := readAWSSecretsManagerParam(s, "/foo/bar")
assert.True(t, calledOk)
assert.NoError(t, err)
assert.Equal(t, []byte("blub"), output)
}
|
