cert-manager-webhook-sthome/sthome/utils_test.go

package sthome

import (
	"context"
	"fmt"
	"os"
	"reflect"
	"testing"

	"github.com/cert-manager/cert-manager/pkg/acme/webhook/apis/acme/v1alpha1"
	//client "github.com/kubernetes-sdk-for-go-101/pkg/client"
	v1 "k8s.io/api/core/v1"
	extapi "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	testclient "k8s.io/client-go/kubernetes/fake"
)

func Test_loadConfig(t *testing.T) {
	testCases := []struct {
		json      string
		config    LocalDNSProviderConfig
		shouldErr bool
	}{
		{
			json: `{
  "accessKeySecretRef": {
    "name": "sthome-secret",
    "key": "STHOME_ACCESS_KEY"
  },
  "secretKeySecretRef": {
    "name": "sthome-secret",
    "key": "STHOME_SECRET_KEY"
  }
}`,
			config: LocalDNSProviderConfig{
				AccessKey: &v1.SecretKeySelector{
					LocalObjectReference: v1.LocalObjectReference{
						Name: "sthome-secret",
					},
					Key: "STHOME_ACCESS_KEY",
				},
				SecretKey: &v1.SecretKeySelector{
					LocalObjectReference: v1.LocalObjectReference{
						Name: "sthome-secret",
					},
					Key: "STHOME_SECRET_KEY",
				},
			},
			shouldErr: false,
		},
		{
			json: `{
  "dummy": }
}`,
			shouldErr: true,
		},
		{
			shouldErr: false,
			config:    LocalDNSProviderConfig{},
		},
	}

	for _, test := range testCases {
		json := &extapi.JSON{
			Raw: []byte(test.json),
		}
		if test.json == "" {
			json = nil
		}
		config, err := loadConfig(json)
		if err != nil {
			if !test.shouldErr {
				t.Errorf("got error %v where no error was expected", err)
			}
		} else if test.shouldErr {
			t.Errorf("didn't get an error where an error was expected")
		}
		if !reflect.DeepEqual(config, test.config) {
			t.Errorf("Wrong config value: wanted %v got %v", test.config, config)
		}
	}
}

func Test_getDomainAPI(t *testing.T) {
	jsonBothKey := &extapi.JSON{
		Raw: []byte(`{
  "accessKeySecretRef": {
    "name": "sthome-secret",
    "key": "STHOME_ACCESS_KEY"
  },
  "secretKeySecretRef": {
    "name": "sthome-secret",
    "key": "STHOME_SECRET_KEY"
  }
}`),
	}

	testCases := []struct {
		ch         *v1alpha1.ChallengeRequest
		env        map[string]string
		secret     *v1.Secret
		shouldErr  bool
		errMessage string
	}{
		{
			ch:         &v1alpha1.ChallengeRequest{},
			shouldErr:  true,
			errMessage: "failed to initialize sthome client: access key cannot be empty",
		},
		{
			ch: &v1alpha1.ChallengeRequest{},
			env: map[string]string{
				SthomeAccessKeyEnv: "STHOMEXXXXXXXXXXXXXXXXX",
			},
			shouldErr:  true,
			errMessage: "failed to initialize sthome client: ssecret key cannot be empty",
		},
		{
			ch: &v1alpha1.ChallengeRequest{},
			env: map[string]string{
				SthomeAccessKeyEnv: "STHOMEXXXXXXXXXXXXXX",
				SthomeSecretKeyEnv: "66666666-7777-8888-9999-000000000000",
			},
			shouldErr: false,
		},
		{
			ch: &v1alpha1.ChallengeRequest{
				Config:            jsonBothKey,
				ResourceNamespace: "test",
			},
			secret: &v1.Secret{
				ObjectMeta: metav1.ObjectMeta{
					Name:      "sthome-secret",
					Namespace: "test",
				},
				Data: map[string][]byte{
					SthomeAccessKeyEnv: []byte("STHOMEXXXXXXXXXXXXXX"),
				},
			},
			shouldErr:  true,
			errMessage: "could not get key STHOME_SECRET_KEY in secret sthome-secret",
		},
		{
			ch: &v1alpha1.ChallengeRequest{
				Config:            jsonBothKey,
				ResourceNamespace: "test",
			},
			secret: &v1.Secret{
				ObjectMeta: metav1.ObjectMeta{
					Name:      "sthome-secret",
					Namespace: "test",
				},
				Data: map[string][]byte{
					SthomeSecretKeyEnv: []byte("66666666-7777-8888-9999-000000000000"),
					SthomeAccessKeyEnv: []byte("STHOMEXXXXXXXXXXXXXXXXX"),
				},
			},
			shouldErr: false,
		},
	}

	for _, test := range testCases {
		fakeKubernetesClient := testclient.NewSimpleClientset()
		pSolver := &LocalDNSProviderSolver{
			client: fakeKubernetesClient,
		}

		if test.secret != nil {
			_, err := pSolver.client.CoreV1().Secrets(test.ch.ResourceNamespace).Create(context.Background(), test.secret, metav1.CreateOptions{})
			if err != nil {
				t.Errorf("failed to create kubernetes secret")
			}
		}
		for k, v := range test.env {
			os.Setenv(k, v)
		}
		_, err := getDomainAPI(test.ch)
		if err != nil {
			if !test.shouldErr {
				t.Errorf("got error %v where no error was expected", err)
			}
			if err.Error() != test.errMessage {
				t.Errorf("expected error %s, got %s", test.errMessage, err.Error())
			}
		} else if test.shouldErr {
			t.Errorf("didn't get an error where an error was expected with message %s", test.errMessage)
		}
		for k := range test.env {
			os.Unsetenv(k)
		}
	}
}

// dummy, should actually return the API, but here we just return the config
func getDomainAPI(ch *v1alpha1.ChallengeRequest) (*LocalDNSProviderConfig, error) {
	config, err := loadConfig(ch.Config)
	if err != nil {
		return nil, fmt.Errorf("failed to load config: %w", err)
	}
	return &config, err
}