100 lines
2.4 KiB
Go
100 lines
2.4 KiB
Go
|
package token
|
||
|
|
|
||
|
|
import (
|
||
|
|
"bytes"
|
||
|
|
"context"
|
||
|
|
"strings"
|
||
|
|
"testing"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
"github.com/hashicorp/go-hclog"
|
||
|
|
logicalKv "github.com/hashicorp/vault-plugin-secrets-kv"
|
||
|
|
"github.com/hashicorp/vault/api"
|
||
|
|
"github.com/hashicorp/vault/helper/testhelpers"
|
||
|
|
vaulthttp "github.com/hashicorp/vault/http"
|
||
|
|
"github.com/hashicorp/vault/logical"
|
||
|
|
"github.com/hashicorp/vault/physical"
|
||
|
|
"github.com/hashicorp/vault/vault"
|
||
|
|
"github.com/kr/pretty"
|
||
|
|
)
|
||
|
|
|
||
|
|
// Tests the regression in
|
||
|
|
// https://github.com/hashicorp/vault-plugin-secrets-kv/pull/31
|
||
|
|
func TestKVv2_UpgradePaths(t *testing.T) {
|
||
|
|
logOut := new(bytes.Buffer)
|
||
|
|
logger := hclog.New(&hclog.LoggerOptions{
|
||
|
|
Output: logOut,
|
||
|
|
})
|
||
|
|
|
||
|
|
coreConfig := &vault.CoreConfig{
|
||
|
|
LogicalBackends: map[string]logical.Factory{
|
||
|
|
"kv": logicalKv.Factory,
|
||
|
|
},
|
||
|
|
EnableRaw: true,
|
||
|
|
Logger: logger,
|
||
|
|
}
|
||
|
|
cluster := vault.NewTestCluster(t, coreConfig, &vault.TestClusterOptions{
|
||
|
|
HandlerFunc: vaulthttp.Handler,
|
||
|
|
})
|
||
|
|
cluster.Start()
|
||
|
|
defer cluster.Cleanup()
|
||
|
|
|
||
|
|
core := cluster.Cores[0]
|
||
|
|
vault.TestWaitActive(t, core.Core)
|
||
|
|
client := core.Client
|
||
|
|
|
||
|
|
// Enable KVv2
|
||
|
|
err := client.Sys().Mount("kv", &api.MountInput{
|
||
|
|
Type: "kv-v2",
|
||
|
|
})
|
||
|
|
if err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
|
||
|
|
cluster.EnsureCoresSealed(t)
|
||
|
|
|
||
|
|
ctx := context.Background()
|
||
|
|
|
||
|
|
// Delete the policy from storage, to trigger the clean slate necessary for
|
||
|
|
// the error
|
||
|
|
mounts, err := core.UnderlyingStorage.List(ctx, "logical/")
|
||
|
|
if err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
kvMount := mounts[0]
|
||
|
|
basePaths, err := core.UnderlyingStorage.List(ctx, "logical/"+kvMount)
|
||
|
|
if err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
basePath := basePaths[0]
|
||
|
|
|
||
|
|
beforeList, err := core.UnderlyingStorage.List(ctx, "logical/"+kvMount+basePath)
|
||
|
|
if err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
t.Log(pretty.Sprint(beforeList))
|
||
|
|
|
||
|
|
// Delete policy/archive
|
||
|
|
if err = logical.ClearView(ctx, physical.NewView(core.UnderlyingStorage, "logical/"+kvMount+basePath+"policy/")); err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
if err = logical.ClearView(ctx, physical.NewView(core.UnderlyingStorage, "logical/"+kvMount+basePath+"archive/")); err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
|
||
|
|
afterList, err := core.UnderlyingStorage.List(ctx, "logical/"+kvMount+basePath)
|
||
|
|
if err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
t.Log(pretty.Sprint(afterList))
|
||
|
|
|
||
|
|
testhelpers.EnsureCoresUnsealed(t, cluster)
|
||
|
|
|
||
|
|
// Need to give it time to actually set up
|
||
|
|
time.Sleep(10 * time.Second)
|
||
|
|
|
||
|
|
if strings.Contains(logOut.String(), "cannot write to storage during setup") {
|
||
|
|
t.Fatal("got a cannot write to storage during setup error")
|
||
|
|
}
|
||
|
|
}
|