-
Notifications
You must be signed in to change notification settings - Fork 139
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Implement kubernetes auth / Add customizable auth path (#218)
* Implement kubernetes auth / Add customizable auth path * Fix typo * Apply suggestions from code review Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com> Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
- Loading branch information
1 parent
0cf3bd6
commit 72c7a89
Showing
5 changed files
with
139 additions
and
23 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,83 @@ | ||
| jest.mock('got'); | ||
| jest.mock('@actions/core'); | ||
| jest.mock('@actions/core/lib/command'); | ||
| jest.mock("fs") | ||
|
|
||
| const core = require('@actions/core'); | ||
| const got = require('got'); | ||
| const fs = require("fs") | ||
| const { when } = require('jest-when'); | ||
|
|
||
|
|
||
| const { | ||
| retrieveToken | ||
| } = require('./auth'); | ||
|
|
||
|
|
||
| function mockInput(name, key) { | ||
| when(core.getInput) | ||
| .calledWith(name) | ||
| .mockReturnValueOnce(key); | ||
| } | ||
|
|
||
| function mockApiResponse() { | ||
| const response = { body: { auth: { client_token: testToken, renewable: true, policies: [], accessor: "accessor" } } } | ||
| got.post = jest.fn() | ||
| got.post.mockReturnValue(response) | ||
| } | ||
| const testToken = "testoken"; | ||
|
|
||
| describe("test retrival for token", () => { | ||
|
|
||
| beforeEach(() => { | ||
| jest.resetAllMocks(); | ||
| }); | ||
|
|
||
| it("test retrival with approle", async () => { | ||
| const method = 'approle' | ||
| mockApiResponse() | ||
| const testRoleId = "testRoleId" | ||
| const testSecretId = "testSecretId" | ||
| mockInput("roleId", testRoleId) | ||
| mockInput("secretId", testSecretId) | ||
| const token = await retrieveToken(method, got) | ||
| expect(token).toEqual(testToken) | ||
| const payload = got.post.mock.calls[0][1].json | ||
| expect(payload).toEqual({ role_id: testRoleId, secret_id: testSecretId }) | ||
| const url = got.post.mock.calls[0][0] | ||
| expect(url).toContain('approle') | ||
| }) | ||
|
|
||
| it("test retrival with github token", async () => { | ||
| const method = 'github' | ||
| mockApiResponse() | ||
| const githubToken = "githubtoken" | ||
| mockInput("githubToken", githubToken) | ||
| const token = await retrieveToken(method, got) | ||
| expect(token).toEqual(testToken) | ||
| const payload = got.post.mock.calls[0][1].json | ||
| expect(payload).toEqual({ token: githubToken }) | ||
| const url = got.post.mock.calls[0][0] | ||
| expect(url).toContain('github') | ||
| }) | ||
|
|
||
| it("test retrival with kubernetes", async () => { | ||
| const method = 'kubernetes' | ||
| const jwtToken = "someJwtToken" | ||
| const testRole = "testRole" | ||
| const testTokenPath = "testTokenPath" | ||
| const testPath = 'differentK8sPath' | ||
| mockApiResponse() | ||
| mockInput("kubernetesTokenPath", testTokenPath) | ||
| mockInput("role", testRole) | ||
| mockInput("path", testPath) | ||
| fs.readFileSync = jest.fn() | ||
| fs.readFileSync.mockReturnValueOnce(jwtToken) | ||
| const token = await retrieveToken(method, got) | ||
| expect(token).toEqual(testToken) | ||
| const payload = got.post.mock.calls[0][1].json | ||
| expect(payload).toEqual({ jwt: jwtToken, role: testRole }) | ||
| const url = got.post.mock.calls[0][0] | ||
| expect(url).toContain('differentK8sPath') | ||
| }) | ||
| }) |