52 lines
1.7 KiB
Go
52 lines
1.7 KiB
Go
//go:build integration
|
|
|
|
package openbao_test
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"testing"
|
|
|
|
bao "github.com/openbao/openbao/api/v2"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
|
|
databasev1alpha1 "git.ddupan.top/panxiao81/ayatori/api/database/v1alpha1"
|
|
"git.ddupan.top/panxiao81/ayatori/internal/database/adapter/kubernetes"
|
|
)
|
|
|
|
// 在 API 边界模拟旧 schema 裁剪位置字段；剩余写入仍由真实 API server 处理。
|
|
type prunedLocationClient struct{ client.Client }
|
|
|
|
func (c prunedLocationClient) Status() client.SubResourceWriter {
|
|
return prunedLocationWriter{SubResourceWriter: c.Client.Status()}
|
|
}
|
|
|
|
type prunedLocationWriter struct{ client.SubResourceWriter }
|
|
|
|
func (w prunedLocationWriter) Update(ctx context.Context, object client.Object, options ...client.SubResourceUpdateOption) error {
|
|
if database, ok := object.(*databasev1alpha1.PostgreSQLDatabase); ok {
|
|
database.Status.CredentialRef = nil
|
|
}
|
|
return w.SubResourceWriter.Update(ctx, object, options...)
|
|
}
|
|
|
|
func testPreparationPruning(t *testing.T, f *preparationFixture) {
|
|
database, _ := f.bound(t, "pruning")
|
|
service := f.service(t)
|
|
service.Resources = &kubernetes.CredentialResources{Client: prunedLocationClient{f.api}, Reader: f.api}
|
|
if err := service.Reconcile(t.Context(), database.Name); err == nil {
|
|
t.Fatal("API 未保留位置时不得继续供应")
|
|
}
|
|
location, err := service.Store.ProvisionLocation(string(database.UID))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := f.bao.KVv2(location.Mount).Get(t.Context(), location.Path); !errors.Is(err, bao.ErrSecretNotFound) {
|
|
t.Fatal("没有持久化位置时产生了外部凭据")
|
|
}
|
|
if err := f.service(t).Reconcile(t.Context(), database.Name); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
f.status(t, database, 1, "CredentialPrepared")
|
|
}
|