2022-02-21 20:36:29 +00:00
|
|
|
package coderd_test
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
"net/http"
|
|
|
|
"testing"
|
|
|
|
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
|
|
|
|
"github.com/coder/coder/coderd/coderdtest"
|
|
|
|
"github.com/coder/coder/codersdk"
|
|
|
|
"github.com/coder/coder/provisioner/echo"
|
|
|
|
"github.com/coder/coder/provisionersdk/proto"
|
|
|
|
)
|
|
|
|
|
2022-03-28 19:31:03 +00:00
|
|
|
func TestPostWorkspaceAuthAWSInstanceIdentity(t *testing.T) {
|
|
|
|
t.Parallel()
|
|
|
|
t.Run("Success", func(t *testing.T) {
|
|
|
|
t.Parallel()
|
|
|
|
instanceID := "instanceidentifier"
|
|
|
|
certificates, metadataClient := coderdtest.NewAWSInstanceIdentity(t, instanceID)
|
|
|
|
client := coderdtest.New(t, &coderdtest.Options{
|
|
|
|
AWSInstanceIdentity: certificates,
|
|
|
|
})
|
|
|
|
user := coderdtest.CreateFirstUser(t, client)
|
|
|
|
coderdtest.NewProvisionerDaemon(t, client)
|
|
|
|
version := coderdtest.CreateProjectVersion(t, client, user.OrganizationID, &echo.Responses{
|
|
|
|
Parse: echo.ParseComplete,
|
|
|
|
Provision: []*proto.Provision_Response{{
|
|
|
|
Type: &proto.Provision_Response_Complete{
|
|
|
|
Complete: &proto.Provision_Complete{
|
|
|
|
Resources: []*proto.Resource{{
|
|
|
|
Name: "somename",
|
|
|
|
Type: "someinstance",
|
|
|
|
Agent: &proto.Agent{
|
|
|
|
Auth: &proto.Agent_InstanceId{
|
|
|
|
InstanceId: instanceID,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}},
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}},
|
|
|
|
})
|
|
|
|
project := coderdtest.CreateProject(t, client, user.OrganizationID, version.ID)
|
|
|
|
coderdtest.AwaitProjectVersionJob(t, client, version.ID)
|
2022-04-01 19:42:36 +00:00
|
|
|
workspace := coderdtest.CreateWorkspace(t, client, codersdk.Me, project.ID)
|
2022-03-28 19:31:03 +00:00
|
|
|
coderdtest.AwaitWorkspaceBuildJob(t, client, workspace.LatestBuild.ID)
|
|
|
|
|
|
|
|
client.HTTPClient = metadataClient
|
|
|
|
_, err := client.AuthWorkspaceAWSInstanceIdentity(context.Background())
|
|
|
|
require.NoError(t, err)
|
|
|
|
})
|
|
|
|
}
|
|
|
|
|
2022-03-07 17:40:54 +00:00
|
|
|
func TestPostWorkspaceAuthGoogleInstanceIdentity(t *testing.T) {
|
2022-02-21 20:36:29 +00:00
|
|
|
t.Parallel()
|
|
|
|
t.Run("Expired", func(t *testing.T) {
|
|
|
|
t.Parallel()
|
|
|
|
instanceID := "instanceidentifier"
|
2022-03-25 19:48:08 +00:00
|
|
|
validator, metadata := coderdtest.NewGoogleInstanceIdentity(t, instanceID, true)
|
2022-02-21 20:36:29 +00:00
|
|
|
client := coderdtest.New(t, &coderdtest.Options{
|
2022-03-28 19:31:03 +00:00
|
|
|
GoogleInstanceIdentity: validator,
|
2022-02-21 20:36:29 +00:00
|
|
|
})
|
2022-03-25 19:48:08 +00:00
|
|
|
_, err := client.AuthWorkspaceGoogleInstanceIdentity(context.Background(), "", metadata)
|
2022-02-21 20:36:29 +00:00
|
|
|
var apiErr *codersdk.Error
|
|
|
|
require.ErrorAs(t, err, &apiErr)
|
|
|
|
require.Equal(t, http.StatusUnauthorized, apiErr.StatusCode())
|
|
|
|
})
|
|
|
|
|
|
|
|
t.Run("InstanceNotFound", func(t *testing.T) {
|
|
|
|
t.Parallel()
|
|
|
|
instanceID := "instanceidentifier"
|
2022-03-25 19:48:08 +00:00
|
|
|
validator, metadata := coderdtest.NewGoogleInstanceIdentity(t, instanceID, false)
|
2022-02-21 20:36:29 +00:00
|
|
|
client := coderdtest.New(t, &coderdtest.Options{
|
2022-03-28 19:31:03 +00:00
|
|
|
GoogleInstanceIdentity: validator,
|
2022-02-21 20:36:29 +00:00
|
|
|
})
|
2022-03-25 19:48:08 +00:00
|
|
|
_, err := client.AuthWorkspaceGoogleInstanceIdentity(context.Background(), "", metadata)
|
2022-02-21 20:36:29 +00:00
|
|
|
var apiErr *codersdk.Error
|
|
|
|
require.ErrorAs(t, err, &apiErr)
|
|
|
|
require.Equal(t, http.StatusNotFound, apiErr.StatusCode())
|
|
|
|
})
|
|
|
|
|
|
|
|
t.Run("Success", func(t *testing.T) {
|
|
|
|
t.Parallel()
|
|
|
|
instanceID := "instanceidentifier"
|
2022-03-25 19:48:08 +00:00
|
|
|
validator, metadata := coderdtest.NewGoogleInstanceIdentity(t, instanceID, false)
|
2022-02-21 20:36:29 +00:00
|
|
|
client := coderdtest.New(t, &coderdtest.Options{
|
2022-03-28 19:31:03 +00:00
|
|
|
GoogleInstanceIdentity: validator,
|
2022-02-21 20:36:29 +00:00
|
|
|
})
|
2022-03-07 17:40:54 +00:00
|
|
|
user := coderdtest.CreateFirstUser(t, client)
|
2022-02-21 20:36:29 +00:00
|
|
|
coderdtest.NewProvisionerDaemon(t, client)
|
2022-03-07 17:40:54 +00:00
|
|
|
version := coderdtest.CreateProjectVersion(t, client, user.OrganizationID, &echo.Responses{
|
2022-03-22 19:17:50 +00:00
|
|
|
Parse: echo.ParseComplete,
|
2022-02-21 20:36:29 +00:00
|
|
|
Provision: []*proto.Provision_Response{{
|
|
|
|
Type: &proto.Provision_Response_Complete{
|
|
|
|
Complete: &proto.Provision_Complete{
|
|
|
|
Resources: []*proto.Resource{{
|
2022-02-28 17:16:44 +00:00
|
|
|
Name: "somename",
|
|
|
|
Type: "someinstance",
|
|
|
|
Agent: &proto.Agent{
|
2022-03-25 16:34:45 +00:00
|
|
|
Auth: &proto.Agent_InstanceId{
|
|
|
|
InstanceId: instanceID,
|
2022-02-28 17:16:44 +00:00
|
|
|
},
|
|
|
|
},
|
2022-02-21 20:36:29 +00:00
|
|
|
}},
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}},
|
|
|
|
})
|
2022-03-07 17:40:54 +00:00
|
|
|
project := coderdtest.CreateProject(t, client, user.OrganizationID, version.ID)
|
|
|
|
coderdtest.AwaitProjectVersionJob(t, client, version.ID)
|
2022-04-01 19:42:36 +00:00
|
|
|
workspace := coderdtest.CreateWorkspace(t, client, codersdk.Me, project.ID)
|
2022-03-22 19:17:50 +00:00
|
|
|
coderdtest.AwaitWorkspaceBuildJob(t, client, workspace.LatestBuild.ID)
|
2022-02-21 20:36:29 +00:00
|
|
|
|
2022-03-25 19:48:08 +00:00
|
|
|
_, err := client.AuthWorkspaceGoogleInstanceIdentity(context.Background(), "", metadata)
|
2022-02-21 20:36:29 +00:00
|
|
|
require.NoError(t, err)
|
|
|
|
})
|
|
|
|
}
|