secrets_test.go

package run

import (
	"bytes"
	"errors"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/kelseyhightower/run/internal/gcptest"
)

var accessSecretTests = []struct {
	name string
	want []byte
	err  error
}{
	{"foo", []byte("Test"), nil},
	{"bar", nil, ErrSecretNotFound},
	{"denied", nil, ErrSecretPermissionDenied},
	{"unauthorized", nil, ErrSecretUnauthorized},
	{"unexpected", nil, ErrSecretUnknownError},
}

func TestAccessSecret(t *testing.T) {
	ms := httptest.NewServer(http.HandlerFunc(gcptest.MetadataHandler))
	defer ms.Close()

	metadataEndpoint = ms.URL

	ss := httptest.NewServer(http.HandlerFunc(gcptest.SecretsHandler))
	defer ss.Close()

	secretmanagerEndpoint = ss.URL

	for _, tt := range accessSecretTests {
		secret, err := AccessSecret(tt.name)
		if !errors.Is(err, tt.err) {
			t.Errorf("unexpected error, want %q, got %q", tt.err, err)
		}

		if !bytes.Equal(secret, tt.want) {
			t.Errorf("want %v, got %v", tt.want, secret)
		}
	}
}

func TestAccessSecretVersion(t *testing.T) {
	ms := httptest.NewServer(http.HandlerFunc(gcptest.MetadataHandler))
	defer ms.Close()

	metadataEndpoint = ms.URL

	ss := httptest.NewServer(http.HandlerFunc(gcptest.SecretsHandler))
	defer ss.Close()

	secretmanagerEndpoint = ss.URL

	secret, err := AccessSecretVersion("foo", "1")
	if err != nil {
		t.Errorf("unexpected error: %v", err)
	}

	if !bytes.Equal(secret, []byte("Test")) {
		t.Errorf("want %v, got %v", "Test", secret)
	}
}