79360b529a
Similar to the previous commit to include a `inputs_service` fixture this does the same for `source.SourcesService` imports. Note that we cannot easily share the helpers so we have to life with a bit of very similar but duplicated code. To fix this we would have to have a shared confftest.py that pytest can find. Which would mean that we need to put the tests under a common dir that is reachable via __init__.py files (which we currently not have because stages, inputs etc do not have a __init__.py so python does not considers them modules).
73 lines
2.4 KiB
Python
73 lines
2.4 KiB
Python
#!/usr/bin/python3
|
|
|
|
import contextlib
|
|
import os
|
|
import pathlib
|
|
import tempfile
|
|
|
|
import pytest
|
|
|
|
SOURCES_NAME = "org.osbuild.curl"
|
|
|
|
|
|
def test_curl_source_not_exists(sources_service):
|
|
tmpdir = tempfile.TemporaryDirectory()
|
|
sources_service.cache = tmpdir.name
|
|
desc = {
|
|
"url": "http://localhost:80/a",
|
|
}
|
|
checksum = "sha256:1234567890123456789012345678901234567890909b14ffb032aa20fa23d9ad6"
|
|
assert not sources_service.exists(checksum, desc)
|
|
|
|
|
|
def test_curl_source_exists(sources_service):
|
|
tmpdir = tempfile.TemporaryDirectory()
|
|
sources_service.cache = tmpdir.name
|
|
desc = {
|
|
"url": "http://localhost:80/a",
|
|
}
|
|
checksum = "sha256:1234567890123456789012345678901234567890909b14ffb032aa20fa23d9ad6"
|
|
pathlib.Path(os.path.join(tmpdir.name, checksum)).touch()
|
|
assert sources_service.exists(checksum, desc)
|
|
|
|
|
|
def test_curl_source_amend_secrets(sources_service):
|
|
tmpdir = tempfile.TemporaryDirectory()
|
|
sources_service.cache = tmpdir.name
|
|
desc = {
|
|
"url": "http://localhost:80/a",
|
|
"secrets": {
|
|
"name": "org.osbuild.mtls",
|
|
},
|
|
}
|
|
|
|
with contextlib.ExitStack() as cm:
|
|
os.environ["OSBUILD_SOURCES_CURL_SSL_CLIENT_KEY"] = "key"
|
|
os.environ["OSBUILD_SOURCES_CURL_SSL_CLIENT_CERT"] = "cert"
|
|
|
|
def cb():
|
|
del os.environ["OSBUILD_SOURCES_CURL_SSL_CLIENT_KEY"]
|
|
del os.environ["OSBUILD_SOURCES_CURL_SSL_CLIENT_CERT"]
|
|
cm.callback(cb)
|
|
checksum = "sha256:1234567890123456789012345678901234567890909b14ffb032aa20fa23d9ad6"
|
|
pathlib.Path(os.path.join(tmpdir.name, checksum)).touch()
|
|
new_desc = sources_service.amend_secrets(checksum, desc)
|
|
assert new_desc[1]["secrets"]["ssl_client_key"] == "key"
|
|
assert new_desc[1]["secrets"]["ssl_client_cert"] == "cert"
|
|
assert new_desc[1]["secrets"]["ssl_ca_cert"] is None
|
|
|
|
|
|
def test_curl_source_amend_secrets_fail(sources_service):
|
|
tmpdir = tempfile.TemporaryDirectory()
|
|
sources_service.cache = tmpdir.name
|
|
desc = {
|
|
"url": "http://localhost:80/a",
|
|
"secrets": {
|
|
"name": "org.osbuild.mtls",
|
|
},
|
|
}
|
|
checksum = "sha256:1234567890123456789012345678901234567890909b14ffb032aa20fa23d9ad6"
|
|
pathlib.Path(os.path.join(tmpdir.name, checksum)).touch()
|
|
with pytest.raises(RuntimeError) as exc:
|
|
sources_service.amend_secrets(checksum, desc)
|
|
assert "mtls secrets required" in str(exc)
|