63 lines
1.7 KiB
Go
63 lines
1.7 KiB
Go
//go:build integration
|
|
|
|
package openbao_test
|
|
|
|
import (
|
|
"context"
|
|
"sync"
|
|
"sync/atomic"
|
|
"testing"
|
|
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
|
|
|
"git.ddupan.top/panxiao81/ayatori/internal/database/application"
|
|
)
|
|
|
|
// 两个用例都先拿到同一真实 resourceVersion，再竞争固定位置；后续写入仍经过 API server。
|
|
type concurrentCredentialResources struct {
|
|
application.CredentialResources
|
|
readers atomic.Int32
|
|
loaded sync.WaitGroup
|
|
}
|
|
|
|
func (r *concurrentCredentialResources) Load(ctx context.Context, name string) (*application.CredentialRecord, error) {
|
|
record, err := r.CredentialResources.Load(ctx, name)
|
|
if r.readers.Add(1) <= 2 {
|
|
r.loaded.Done()
|
|
r.loaded.Wait()
|
|
}
|
|
return record, err
|
|
}
|
|
|
|
func testPreparationConcurrency(t *testing.T, f *preparationFixture) {
|
|
database, _ := f.bound(t, "concurrent")
|
|
service := f.service(t)
|
|
resources := &concurrentCredentialResources{CredentialResources: service.Resources}
|
|
resources.loaded.Add(2)
|
|
service.Resources = resources
|
|
results := make(chan error, 2)
|
|
for range 2 {
|
|
go func() { results <- service.Reconcile(t.Context(), database.Name) }()
|
|
}
|
|
succeeded, conflicted := 0, 0
|
|
for range 2 {
|
|
err := <-results
|
|
switch {
|
|
case err == nil:
|
|
succeeded++
|
|
case apierrors.IsConflict(err):
|
|
conflicted++
|
|
default:
|
|
t.Fatalf("并发用例返回意外错误: %v", err)
|
|
}
|
|
}
|
|
if succeeded != 1 || conflicted != 1 {
|
|
t.Fatal("同一快照只能有一个用例成功固定位置并继续创建")
|
|
}
|
|
f.status(t, database, 1, application.CredentialPrepared)
|
|
stored, err := f.bao.KVv2("secret").Get(t.Context(), database.Status.CredentialRef.Path)
|
|
if err != nil || stored.VersionMetadata.Version != 1 {
|
|
t.Fatal("并发准备用例只能产生一个凭据版本")
|
|
}
|
|
}
|