5a505c5b3a
* auth providers * binding rules * auth provider for kubernetes * login/logout
49 lines
1.1 KiB
Go
49 lines
1.1 KiB
Go
package consul
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/hashicorp/consul/agent/structs"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestDoesBindingRuleMatch(t *testing.T) {
|
|
type matchable struct {
|
|
A string `bexpr:"a"`
|
|
C string `bexpr:"c"`
|
|
}
|
|
|
|
for _, test := range []struct {
|
|
name string
|
|
selector string
|
|
details interface{}
|
|
ok bool
|
|
}{
|
|
{"no fields",
|
|
"a==b", nil, false},
|
|
{"1 term ok",
|
|
"a==b", &matchable{A: "b"}, true},
|
|
{"1 term no field",
|
|
"a==b", &matchable{C: "d"}, false},
|
|
{"1 term wrong value",
|
|
"a==b", &matchable{A: "z"}, false},
|
|
{"2 terms ok",
|
|
"a==b and c==d", &matchable{A: "b", C: "d"}, true},
|
|
{"2 terms one missing field",
|
|
"a==b and c==d", &matchable{A: "b"}, false},
|
|
{"2 terms one wrong value",
|
|
"a==b and c==d", &matchable{A: "z", C: "d"}, false},
|
|
///////////////////////////////
|
|
{"no fields (no selectors)",
|
|
"", nil, true},
|
|
{"1 term ok (no selectors)",
|
|
"", &matchable{A: "b"}, true},
|
|
} {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
rule := structs.ACLBindingRule{Selector: test.selector}
|
|
ok := doesBindingRuleMatch(&rule, test.details)
|
|
require.Equal(t, test.ok, ok)
|
|
})
|
|
}
|
|
}
|