2017-09-15 04:55:25 +00:00
|
|
|
package command
|
|
|
|
|
|
|
|
import (
|
|
|
|
"testing"
|
|
|
|
|
2022-03-15 12:42:43 +00:00
|
|
|
"github.com/hashicorp/nomad/ci"
|
2017-09-15 04:55:25 +00:00
|
|
|
"github.com/hashicorp/nomad/command/agent"
|
|
|
|
"github.com/mitchellh/cli"
|
2022-08-17 20:22:26 +00:00
|
|
|
"github.com/shoenig/test/must"
|
2017-09-15 04:55:25 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
func TestACLTokenCreateCommand(t *testing.T) {
|
2022-03-15 12:42:43 +00:00
|
|
|
ci.Parallel(t)
|
2022-08-17 20:22:26 +00:00
|
|
|
|
2017-09-15 04:55:25 +00:00
|
|
|
config := func(c *agent.Config) {
|
|
|
|
c.ACL.Enabled = true
|
|
|
|
}
|
|
|
|
|
|
|
|
srv, _, url := testServer(t, true, config)
|
2022-08-17 20:22:26 +00:00
|
|
|
defer stopTestAgent(srv)
|
2017-09-15 04:55:25 +00:00
|
|
|
|
|
|
|
// Bootstrap an initial ACL token
|
2017-10-04 22:06:21 +00:00
|
|
|
token := srv.RootToken
|
2022-08-17 20:22:26 +00:00
|
|
|
must.NotNil(t, token)
|
2017-09-15 04:55:25 +00:00
|
|
|
|
2020-10-05 14:07:41 +00:00
|
|
|
ui := cli.NewMockUi()
|
2017-09-15 04:55:25 +00:00
|
|
|
cmd := &ACLTokenCreateCommand{Meta: Meta{Ui: ui, flagAddress: url}}
|
|
|
|
|
2017-09-15 18:08:46 +00:00
|
|
|
// Request to create a new token without providing a valid management token
|
2020-06-25 16:59:25 +00:00
|
|
|
code := cmd.Run([]string{"-address=" + url, "-token=foo", "-policy=foo", "-type=client"})
|
2022-08-17 20:22:26 +00:00
|
|
|
must.One(t, code)
|
2017-09-15 04:55:25 +00:00
|
|
|
|
2017-09-15 18:08:46 +00:00
|
|
|
// Request to create a new token with a valid management token
|
2020-06-25 16:59:25 +00:00
|
|
|
code = cmd.Run([]string{"-address=" + url, "-token=" + token.SecretID, "-policy=foo", "-type=client"})
|
2022-08-17 20:22:26 +00:00
|
|
|
must.Zero(t, code)
|
2017-09-15 04:55:25 +00:00
|
|
|
|
|
|
|
// Check the output
|
|
|
|
out := ui.OutputWriter.String()
|
2022-08-17 20:22:26 +00:00
|
|
|
must.StrContains(t, out, "[foo]")
|
2017-09-15 04:55:25 +00:00
|
|
|
}
|