bb54e9c131
* Add backend plugin changes * Fix totp backend plugin tests * Fix logical/plugin InvalidateKey test * Fix plugin catalog CRUD test, fix NoopBackend * Clean up commented code block * Fix system backend mount test * Set plugin_name to omitempty, fix handleMountTable config parsing * Clean up comments, keep shim connections alive until cleanup * Include pluginClient, disallow LookupPlugin call from within a plugin * Add wrapper around backendPluginClient for proper cleanup * Add logger shim tests * Add logger, storage, and system shim tests * Use pointer receivers for system view shim * Use plugin name if no path is provided on mount * Enable plugins for auth backends * Add backend type attribute, move builtin/plugin/package * Fix merge conflict * Fix missing plugin name in mount config * Add integration tests on enabling auth backend plugins * Remove dependency cycle on mock-plugin * Add passthrough backend plugin, use logical.BackendType to determine lease generation * Remove vault package dependency on passthrough package * Add basic impl test for passthrough plugin * Incorporate feedback; set b.backend after shims creation on backendPluginServer * Fix totp plugin test * Add plugin backends docs * Fix tests * Fix builtin/plugin tests * Remove flatten from PluginRunner fields * Move mock plugin to logical/plugin, remove totp and passthrough plugins * Move pluginMap into newPluginClient * Do not create storage RPC connection on HandleRequest and HandleExistenceCheck * Change shim logger's Fatal to no-op * Change BackendType to uint32, match UX backend types * Change framework.Backend Setup signature * Add Setup func to logical.Backend interface * Move OptionallyEnableMlock call into plugin.Serve, update docs and comments * Remove commented var in plugin package * RegisterLicense on logical.Backend interface (#3017) * Add RegisterLicense to logical.Backend interface * Update RegisterLicense to use callback func on framework.Backend * Refactor framework.Backend.RegisterLicense * plugin: Prevent plugin.SystemViewClient.ResponseWrapData from getting JWTs * plugin: Revert BackendType to remove TypePassthrough and related references * Fix typo in plugin backends docs
177 lines
3.6 KiB
Go
177 lines
3.6 KiB
Go
package plugin
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
gplugin "github.com/hashicorp/go-plugin"
|
|
"github.com/hashicorp/vault/helper/logformat"
|
|
"github.com/hashicorp/vault/logical"
|
|
"github.com/hashicorp/vault/logical/plugin/mock"
|
|
log "github.com/mgutz/logxi/v1"
|
|
)
|
|
|
|
func TestBackendPlugin_impl(t *testing.T) {
|
|
var _ gplugin.Plugin = new(BackendPlugin)
|
|
var _ logical.Backend = new(backendPluginClient)
|
|
}
|
|
|
|
func TestBackendPlugin_HandleRequest(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
resp, err := b.HandleRequest(&logical.Request{
|
|
Operation: logical.ReadOperation,
|
|
Path: "test/ing",
|
|
Data: map[string]interface{}{"value": "foo"},
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if resp.Data["value"] != "foo" {
|
|
t.Fatalf("bad: %#v", resp)
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_SpecialPaths(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
paths := b.SpecialPaths()
|
|
if paths == nil {
|
|
t.Fatal("SpecialPaths() returned nil")
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_System(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
sys := b.System()
|
|
if sys == nil {
|
|
t.Fatal("System() returned nil")
|
|
}
|
|
|
|
actual := sys.DefaultLeaseTTL()
|
|
expected := 300 * time.Second
|
|
|
|
if actual != expected {
|
|
t.Fatalf("bad: %v, expected %v", actual, expected)
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_Logger(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
logger := b.Logger()
|
|
if logger == nil {
|
|
t.Fatal("Logger() returned nil")
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_HandleExistenceCheck(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
checkFound, exists, err := b.HandleExistenceCheck(&logical.Request{
|
|
Operation: logical.CreateOperation,
|
|
Path: "test/ing",
|
|
Data: map[string]interface{}{"value": "foo"},
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if !checkFound {
|
|
t.Fatal("existence check not found for path 'test/ing'")
|
|
}
|
|
if exists {
|
|
t.Fatal("existence check should have returned 'false' for 'testing/read'")
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_Cleanup(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
b.Cleanup()
|
|
}
|
|
|
|
func TestBackendPlugin_Initialize(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
err := b.Initialize()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_InvalidateKey(t *testing.T) {
|
|
b, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
|
|
resp, err := b.HandleRequest(&logical.Request{
|
|
Operation: logical.ReadOperation,
|
|
Path: "internal",
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if resp.Data["value"] == "" {
|
|
t.Fatalf("bad: %#v, expected non-empty value", resp)
|
|
}
|
|
|
|
b.InvalidateKey("internal")
|
|
|
|
resp, err = b.HandleRequest(&logical.Request{
|
|
Operation: logical.ReadOperation,
|
|
Path: "internal",
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if resp.Data["value"] != "" {
|
|
t.Fatalf("bad: expected empty response data, got %#v", resp)
|
|
}
|
|
}
|
|
|
|
func TestBackendPlugin_Setup(t *testing.T) {
|
|
_, cleanup := testBackend(t)
|
|
defer cleanup()
|
|
}
|
|
|
|
func testBackend(t *testing.T) (logical.Backend, func()) {
|
|
// Create a mock provider
|
|
pluginMap := map[string]gplugin.Plugin{
|
|
"backend": &BackendPlugin{
|
|
Factory: mock.Factory,
|
|
},
|
|
}
|
|
client, _ := gplugin.TestPluginRPCConn(t, pluginMap)
|
|
cleanup := func() {
|
|
client.Close()
|
|
}
|
|
|
|
// Request the backend
|
|
raw, err := client.Dispense(BackendPluginName)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
b := raw.(logical.Backend)
|
|
|
|
err = b.Setup(&logical.BackendConfig{
|
|
Logger: logformat.NewVaultLogger(log.LevelTrace),
|
|
System: &logical.StaticSystemView{
|
|
DefaultLeaseTTLVal: 300 * time.Second,
|
|
MaxLeaseTTLVal: 1800 * time.Second,
|
|
},
|
|
StorageView: &logical.InmemStorage{},
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
return b, cleanup
|
|
}
|