|
|
|
@ -1,561 +1,332 @@
|
|
|
|
#!/usr/bin/env bash
|
|
|
|
#!/usr/bin/env bash
|
|
|
|
# Copyright © 2023 OpenIM. All rights reserved.
|
|
|
|
# The root of the build/dist directory
|
|
|
|
#
|
|
|
|
IAM_ROOT=$(dirname "${BASH_SOURCE[0]}")/../..
|
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
[[ -z ${COMMON_SOURCED} ]] && source ${IAM_ROOT}/scripts/install/common.sh
|
|
|
|
# you may not use this file except in compliance with the License.
|
|
|
|
|
|
|
|
# You may obtain a copy of the License at
|
|
|
|
# API Server API Address:Port
|
|
|
|
#
|
|
|
|
INSECURE_OPENIMAPI=${IAM_APISERVER_HOST}:${API_OPENIM_PORT}
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
INSECURE_OPENIMAUTO=${OPENIM_RPC_AUTH_HOST}:${OPENIM_AUTH_PORT}
|
|
|
|
#
|
|
|
|
|
|
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
|
|
Header="-HContent-Type: application/json"
|
|
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
CCURL="curl -f -s -XPOST" # Create
|
|
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
UCURL="curl -f -s -XPUT" # Update
|
|
|
|
# See the License for the specific language governing permissions and
|
|
|
|
RCURL="curl -f -s -XGET" # Retrieve
|
|
|
|
# limitations under the License.
|
|
|
|
DCURL="curl -f -s -XDELETE" # Delete
|
|
|
|
|
|
|
|
|
|
|
|
# A set of helpers for tests
|
|
|
|
openim::test::user()
|
|
|
|
|
|
|
|
{
|
|
|
|
openim::test::clear_all() {
|
|
|
|
token="-HAuthorization: Bearer $(openim::test::login)"
|
|
|
|
if openim::test::if_supports_resource "rc" ; then
|
|
|
|
|
|
|
|
# shellcheck disable=SC2154
|
|
|
|
# 1. If colin, mark, john users exist, clear them first
|
|
|
|
# Disabling because "kube_flags" is set in a parent script
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/users/colin; echo
|
|
|
|
kubectl delete "${kube_flags[@]}" rc --all --grace-period=0 --force
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/users/mark; echo
|
|
|
|
fi
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/users/john; echo
|
|
|
|
if openim::test::if_supports_resource "pods" ; then
|
|
|
|
|
|
|
|
kubectl delete "${kube_flags[@]}" pods --all --grace-period=0 --force
|
|
|
|
# 2. Create colin, mark, john users
|
|
|
|
fi
|
|
|
|
${CCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/users \
|
|
|
|
|
|
|
|
-d'{"password":"User@2021","metadata":{"name":"colin"},"nickname":"colin","email":"colin@foxmail.com","phone":"1812884xxxx"}'; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 3. List all users
|
|
|
|
|
|
|
|
${RCURL} "${token}" "http://${INSECURE_OPENIMAPI}/v1/users?offset=0&limit=10"; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 4. Get detailed information of colin user
|
|
|
|
|
|
|
|
${RCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/users/colin; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 5. Modify colin user
|
|
|
|
|
|
|
|
${UCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/users/colin \
|
|
|
|
|
|
|
|
-d'{"nickname":"colin","email":"colin_modified@foxmail.com","phone":"1812884xxxx"}'; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 6. Delete colin user
|
|
|
|
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/users/colin; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 7. Batch delete users
|
|
|
|
|
|
|
|
${DCURL} "${token}" "http://${INSECURE_OPENIMAPI}/v1/users?name=mark&name=john"; echo
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, /v1/user test passed!\033[0m')"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Prints the calling file and line number $1 levels deep
|
|
|
|
# userRouterGroup := r.Group("/user")
|
|
|
|
# Defaults to 2 levels so you can call this to find your own caller
|
|
|
|
# {
|
|
|
|
openim::test::get_caller() {
|
|
|
|
# userRouterGroup.POST("/user_register", u.UserRegister)
|
|
|
|
local levels=${1:-2}
|
|
|
|
# userRouterGroup.POST("/update_user_info", ParseToken, u.UpdateUserInfo)
|
|
|
|
local caller_file="${BASH_SOURCE[${levels}]}"
|
|
|
|
# userRouterGroup.POST("/set_global_msg_recv_opt", ParseToken, u.SetGlobalRecvMessageOpt)
|
|
|
|
local caller_line="${BASH_LINENO[${levels}-1]}"
|
|
|
|
# userRouterGroup.POST("/get_users_info", ParseToken, u.GetUsersPublicInfo)
|
|
|
|
echo "$(basename "${caller_file}"):${caller_line}"
|
|
|
|
# userRouterGroup.POST("/get_all_users_uid", ParseToken, u.GetAllUsersID)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/account_check", ParseToken, u.AccountCheck)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/get_users", ParseToken, u.GetUsers)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/get_users_online_status", ParseToken, u.GetUsersOnlineStatus)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/get_users_online_token_detail", ParseToken, u.GetUsersOnlineTokenDetail)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/subscribe_users_status", ParseToken, u.SubscriberStatus)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/get_users_status", ParseToken, u.GetUserStatus)
|
|
|
|
|
|
|
|
# userRouterGroup.POST("/get_subscribe_users_status", ParseToken, u.GetSubscribeUsersStatus)
|
|
|
|
|
|
|
|
# }
|
|
|
|
|
|
|
|
openim::test::group()
|
|
|
|
|
|
|
|
{
|
|
|
|
|
|
|
|
token="-HAuthorization: Bearer $(openim::test::login)"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Force exact match of a returned result for a object query. Wrap this with || to support multiple
|
|
|
|
# Define a function to register a user
|
|
|
|
# valid return types.
|
|
|
|
openim::register_user()
|
|
|
|
# This runs `kubectl get` once and asserts that the result is as expected.
|
|
|
|
{
|
|
|
|
# $1: Object on which get should be run
|
|
|
|
user_register_response=$(${CCURL} "${Header}" http://localhost:10002/user/user_register \
|
|
|
|
# $2: The go-template to run on the result
|
|
|
|
-d'{
|
|
|
|
# $3: The expected output
|
|
|
|
"secret": "openIM123",
|
|
|
|
# $4: Additional args to be passed to kubectl
|
|
|
|
"users": [{"userID": "11111112","nickname": "yourNickname","faceURL": "yourFaceURL"}]
|
|
|
|
openim::test::get_object_assert() {
|
|
|
|
}')
|
|
|
|
openim::test::object_assert 1 "$@"
|
|
|
|
|
|
|
|
|
|
|
|
echo "$user_register_response"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Asserts that the output of a given get query is as expected.
|
|
|
|
# Define a function to get a token
|
|
|
|
# Runs the query multiple times before failing it.
|
|
|
|
openim::get_token()
|
|
|
|
# $1: Object on which get should be run
|
|
|
|
{
|
|
|
|
# $2: The go-template to run on the result
|
|
|
|
token_response=$(${CCURL} "${Header}" http://localhost:10002/auth/user_token \
|
|
|
|
# $3: The expected output
|
|
|
|
-d'{
|
|
|
|
# $4: Additional args to be passed to kubectl
|
|
|
|
"secret": "openIM123",
|
|
|
|
openim::test::wait_object_assert() {
|
|
|
|
"platformID": 1,
|
|
|
|
openim::test::object_assert 10 "$@"
|
|
|
|
"userID": "11111112"
|
|
|
|
|
|
|
|
}')
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
token=$(echo $token_response | grep -Po 'token[" :]+\K[^"]+')
|
|
|
|
|
|
|
|
echo "$token"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Asserts that the output of a given get query is as expected.
|
|
|
|
# Define a function to check the account
|
|
|
|
# Can run the query multiple times before failing it.
|
|
|
|
openim::check_account()
|
|
|
|
# $1: Number of times the query should be run before failing it.
|
|
|
|
{
|
|
|
|
# $2: Object on which get should be run
|
|
|
|
local token=$1
|
|
|
|
# $3: The go-template to run on the result
|
|
|
|
account_check_response=$(${CCURL} "${Header}" -H"operationID: 1646445464564" -H"token: ${token}" http://localhost:10002/user/account_check \
|
|
|
|
# $4: The expected output
|
|
|
|
-d'{
|
|
|
|
# $5: Additional args to be passed to kubectl
|
|
|
|
"checkUserIDs": ["11111111","11111112"]
|
|
|
|
openim::test::object_assert() {
|
|
|
|
}')
|
|
|
|
local tries=$1
|
|
|
|
|
|
|
|
local object=$2
|
|
|
|
echo "$account_check_response"
|
|
|
|
local request=$3
|
|
|
|
|
|
|
|
local expected=$4
|
|
|
|
|
|
|
|
local args=${5:-}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
for j in $(seq 1 "${tries}"); do
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling because to allow for expansion here
|
|
|
|
|
|
|
|
res=$(kubectl get "${kube_flags[@]}" ${args} ${object} -o go-template="${request}")
|
|
|
|
|
|
|
|
if [[ "${res}" =~ ^$expected$ ]]; then
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "$(openim::test::get_caller 3): Successful get ${object} ${request}: ${res}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo "Waiting for Get ${object} ${request} ${args}: expected: ${expected}, got: ${res}"
|
|
|
|
|
|
|
|
sleep $((j-1))
|
|
|
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "$(openim::test::get_caller 3): FAIL!"
|
|
|
|
|
|
|
|
echo "Get ${object} ${request}"
|
|
|
|
|
|
|
|
echo " Expected: ${expected}"
|
|
|
|
|
|
|
|
echo " Got: ${res}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::get_object_jsonpath_assert() {
|
|
|
|
# Define a function to register, get a token and check the account
|
|
|
|
local object=$1
|
|
|
|
openim::register_and_check()
|
|
|
|
local request=$2
|
|
|
|
{
|
|
|
|
local expected=$3
|
|
|
|
# Register a user
|
|
|
|
|
|
|
|
user_register_response=$(openim::register_user)
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
if [[ $user_register_response == *"errCode": 0* ]]; then
|
|
|
|
res=$(kubectl get "${kube_flags[@]}" ${object} -o jsonpath=${request})
|
|
|
|
echo "User registration successful."
|
|
|
|
|
|
|
|
|
|
|
|
if [[ "${res}" =~ ^$expected$ ]]; then
|
|
|
|
# Get token
|
|
|
|
echo -n "${green}"
|
|
|
|
token=$(openim::get_token)
|
|
|
|
echo "$(openim::test::get_caller): Successful get ${object} ${request}: ${res}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
if [[ -n $token ]]; then
|
|
|
|
return 0
|
|
|
|
echo "Token acquired: $token"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Check account
|
|
|
|
|
|
|
|
account_check_response=$(openim::check_account $token)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [[ $account_check_response == *"errCode": 0* ]]; then
|
|
|
|
|
|
|
|
echo "Account check successful."
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "Account check failed."
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "Failed to acquire token."
|
|
|
|
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
else
|
|
|
|
echo "${bold}${red}"
|
|
|
|
echo "User registration failed."
|
|
|
|
echo "$(openim::test::get_caller): FAIL!"
|
|
|
|
|
|
|
|
echo "Get ${object} ${request}"
|
|
|
|
|
|
|
|
echo " Expected: ${expected}"
|
|
|
|
|
|
|
|
echo " Got: ${res}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::describe_object_assert() {
|
|
|
|
|
|
|
|
local resource=$1
|
|
|
|
|
|
|
|
local object=$2
|
|
|
|
|
|
|
|
local matches=( "${@:3}" )
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
openim::test::secret()
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
{
|
|
|
|
result=$(kubectl describe "${kube_flags[@]}" ${resource} ${object})
|
|
|
|
token="-HAuthorization: Bearer $(openim::test::login)"
|
|
|
|
|
|
|
|
|
|
|
|
for match in "${matches[@]}"; do
|
|
|
|
# 1. 如果有 secret0 密钥先清空
|
|
|
|
if grep -q "${match}" <<< "${result}"; then
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets/secret0; echo
|
|
|
|
echo "matched ${match}"
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "$(openim::test::get_caller): FAIL!"
|
|
|
|
|
|
|
|
echo "Describe ${resource} ${object}"
|
|
|
|
|
|
|
|
echo " Expected Match: ${match}"
|
|
|
|
|
|
|
|
echo " Not found in:"
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
# 2. 创建 secret0 密钥
|
|
|
|
echo "$(openim::test::get_caller): Successful describe ${resource} ${object}:"
|
|
|
|
${CCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets \
|
|
|
|
echo "${result}"
|
|
|
|
-d'{"metadata":{"name":"secret0"},"expires":0,"description":"admin secret"}'; echo
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::describe_object_events_assert() {
|
|
|
|
# 3. 列出所有密钥
|
|
|
|
local resource=$1
|
|
|
|
${RCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets; echo
|
|
|
|
local object=$2
|
|
|
|
|
|
|
|
local showevents=${3:-"true"}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
# 4. 获取 secret0 密钥的详细信息
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
${RCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets/secret0; echo
|
|
|
|
if [[ -z "${3:-}" ]]; then
|
|
|
|
|
|
|
|
result=$(kubectl describe "${kube_flags[@]}" ${resource} ${object})
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
result=$(kubectl describe "${kube_flags[@]}" "--show-events=${showevents}" ${resource} ${object})
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if grep -q "No events.\|Events:" <<< "${result}"; then
|
|
|
|
# 5. 修改 secret0 密钥
|
|
|
|
local has_events="true"
|
|
|
|
${UCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets/secret0 \
|
|
|
|
else
|
|
|
|
-d'{"expires":0,"description":"admin secret(modified)"}'; echo
|
|
|
|
local has_events="false"
|
|
|
|
|
|
|
|
fi
|
|
|
|
# 6. 删除 secret0 密钥
|
|
|
|
if [[ "${showevents}" == "${has_events}" ]]; then
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets/secret0; echo
|
|
|
|
echo -n "${green}"
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, /v1/secret test passed!\033[0m')"
|
|
|
|
echo "$(openim::test::get_caller): Successful describe"
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "$(openim::test::get_caller): FAIL"
|
|
|
|
|
|
|
|
if [[ "${showevents}" == "false" ]]; then
|
|
|
|
|
|
|
|
echo " Events information should not be described in:"
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo " Events information not found in:"
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::describe_resource_assert() {
|
|
|
|
openim::test::policy()
|
|
|
|
local resource=$1
|
|
|
|
{
|
|
|
|
local matches=( "${@:2}" )
|
|
|
|
token="-HAuthorization: Bearer $(openim::test::login)"
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
# 1. 如果有 policy0 策略先清空
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/policies/policy0; echo
|
|
|
|
result=$(kubectl describe "${kube_flags[@]}" ${resource})
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
for match in "${matches[@]}"; do
|
|
|
|
# 2. 创建 policy0 策略
|
|
|
|
if grep -q "${match}" <<< "${result}"; then
|
|
|
|
${CCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/policies \
|
|
|
|
echo "matched ${match}"
|
|
|
|
-d'{"metadata":{"name":"policy0"},"policy":{"description":"One policy to rule them all.","subjects":["users:<peter|ken>","users:maria","groups:admins"],"actions":["delete","<create|update>"],"effect":"allow","resources":["resources:articles:<.*>","resources:printer"],"conditions":{"remoteIPAddress":{"type":"CIDRCondition","options":{"cidr":"192.168.0.1/16"}}}}}'; echo
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL!"
|
|
|
|
|
|
|
|
echo "Describe ${resource}"
|
|
|
|
|
|
|
|
echo " Expected Match: ${match}"
|
|
|
|
|
|
|
|
echo " Not found in:"
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
# 3. 列出所有策略
|
|
|
|
echo "Successful describe ${resource}:"
|
|
|
|
${RCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/policies; echo
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::describe_resource_events_assert() {
|
|
|
|
# 4. 获取 policy0 策略的详细信息
|
|
|
|
local resource=$1
|
|
|
|
${RCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/policies/policy0; echo
|
|
|
|
local showevents=${2:-"true"}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
# 5. 修改 policy0 策略
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
${UCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/policies/policy0 \
|
|
|
|
result=$(kubectl describe "${kube_flags[@]}" "--show-events=${showevents}" ${resource})
|
|
|
|
-d'{"policy":{"description":"One policy to rule them all(modified).","subjects":["users:<peter|ken>","users:maria","groups:admins"],"actions":["delete","<create|update>"],"effect":"allow","resources":["resources:articles:<.*>","resources:printer"],"conditions":{"remoteIPAddress":{"type":"CIDRCondition","options":{"cidr":"192.168.0.1/16"}}}}}'; echo
|
|
|
|
|
|
|
|
|
|
|
|
if grep -q "No events.\|Events:" <<< "${result}"; then
|
|
|
|
# 6. 删除 policy0 策略
|
|
|
|
local has_events="true"
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/policies/policy0; echo
|
|
|
|
else
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, /v1/policy test passed!\033[0m')"
|
|
|
|
local has_events="false"
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
if [[ "${showevents}" == "${has_events}" ]]; then
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "Successful describe"
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL"
|
|
|
|
|
|
|
|
if [[ "${showevents}" == "false" ]]; then
|
|
|
|
|
|
|
|
echo " Events information should not be described in:"
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo " Events information not found in:"
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo "${result}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::describe_resource_chunk_size_assert() {
|
|
|
|
openim::test::apiserver()
|
|
|
|
# $1: the target resource
|
|
|
|
{
|
|
|
|
local resource=$1
|
|
|
|
openim::test::user
|
|
|
|
# $2: comma-separated list of additional resources that will be listed
|
|
|
|
openim::test::secret
|
|
|
|
local additionalResources=${2:-}
|
|
|
|
openim::test::policy
|
|
|
|
# Remaining args are flags to pass to kubectl
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, openim-apiserver test passed!\033[0m')"
|
|
|
|
local args=${3:-}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Expect list requests for the target resource and the additional resources
|
|
|
|
|
|
|
|
local expectLists
|
|
|
|
|
|
|
|
IFS="," read -r -a expectLists <<< "${resource},${additionalResources}"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
|
|
|
|
defaultResult=$(kubectl describe ${resource} --show-events=true -v=6 ${args} "${kube_flags[@]}" 2>&1 >/dev/null)
|
|
|
|
|
|
|
|
for r in "${expectLists[@]}"; do
|
|
|
|
|
|
|
|
if grep -q "${r}?.*limit=500" <<< "${defaultResult}"; then
|
|
|
|
|
|
|
|
echo "query for ${r} had limit param"
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL!"
|
|
|
|
|
|
|
|
echo "Describe ${resource}"
|
|
|
|
|
|
|
|
echo " Expected limit param on request for: ${r}"
|
|
|
|
|
|
|
|
echo " Not found in:"
|
|
|
|
|
|
|
|
echo "${defaultResult}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling to allow for expansion here
|
|
|
|
|
|
|
|
# Try a non-default chunk size
|
|
|
|
|
|
|
|
customResult=$(kubectl describe ${resource} --show-events=false --chunk-size=10 -v=6 ${args} "${kube_flags[@]}" 2>&1 >/dev/null)
|
|
|
|
|
|
|
|
if grep -q "${resource}?limit=10" <<< "${customResult}"; then
|
|
|
|
|
|
|
|
echo "query for ${resource} had user-specified limit param"
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL!"
|
|
|
|
|
|
|
|
echo "Describe ${resource}"
|
|
|
|
|
|
|
|
echo " Expected limit param on request for: ${r}"
|
|
|
|
|
|
|
|
echo " Not found in:"
|
|
|
|
|
|
|
|
echo "${customResult}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
openim::test::authz()
|
|
|
|
echo "Successful describe ${resource} verbose logs:"
|
|
|
|
{
|
|
|
|
echo "${defaultResult}"
|
|
|
|
token="-HAuthorization: Bearer $(openim::test::login)"
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
return 0
|
|
|
|
# 1. 如果有 authzpolicy 策略先清空
|
|
|
|
}
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/policies/authzpolicy; echo
|
|
|
|
|
|
|
|
|
|
|
|
# Compare sort-by resource name output (first column, skipping first line) with expected order specify in the last parameter
|
|
|
|
# 2. 创建 authzpolicy 策略
|
|
|
|
openim::test::if_sort_by_has_correct_order() {
|
|
|
|
${CCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/policies \
|
|
|
|
local var
|
|
|
|
-d'{"metadata":{"name":"authzpolicy"},"policy":{"description":"One policy to rule them all.","subjects":["users:<peter|ken>","users:maria","groups:admins"],"actions":["delete","<create|update>"],"effect":"allow","resources":["resources:articles:<.*>","resources:printer"],"conditions":{"remoteIPAddress":{"type":"CIDRCondition","options":{"cidr":"192.168.0.1/16"}}}}}'; echo
|
|
|
|
var="$(echo "$1" | awk '{if(NR!=1) print $1}' | tr '\n' ':')"
|
|
|
|
|
|
|
|
openim::test::if_has_string "${var}" "${@:$#}"
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::if_has_string() {
|
|
|
|
# 3. 如果有 authzsecret 密钥先清空
|
|
|
|
local message=$1
|
|
|
|
${DCURL} "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets/authzsecret; echo
|
|
|
|
local match=$2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if grep -q "${match}" <<< "${message}"; then
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "Successful"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
echo "message:${message}"
|
|
|
|
|
|
|
|
echo "has:${match}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo -n "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL!"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
echo "message:${message}"
|
|
|
|
|
|
|
|
echo "has not:${match}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::if_has_not_string() {
|
|
|
|
# 4. 创建 authzsecret 密钥
|
|
|
|
local message=$1
|
|
|
|
secret=$(${CCURL} "${Header}" "${token}" http://${INSECURE_OPENIMAPI}/v1/secrets -d'{"metadata":{"name":"authzsecret"},"expires":0,"description":"admin secret"}')
|
|
|
|
local match=$2
|
|
|
|
secretID=$(echo ${secret} | grep -Po 'secretID[" :]+\K[^"]+')
|
|
|
|
|
|
|
|
secretKey=$(echo ${secret} | grep -Po 'secretKey[" :]+\K[^"]+')
|
|
|
|
if grep -q "${match}" <<< "${message}"; then
|
|
|
|
|
|
|
|
echo -n "${bold}${red}"
|
|
|
|
# 5. 生成 token
|
|
|
|
echo "FAIL!"
|
|
|
|
token=$(iamctl jwt sign ${secretID} ${secretKey})
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
echo "message:${message}"
|
|
|
|
|
|
|
|
echo "has:${match}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "Successful"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
echo "message:${message}"
|
|
|
|
|
|
|
|
echo "has not:${match}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::if_empty_string() {
|
|
|
|
# 6. 调用 /v1/authz 完成资源授权。
|
|
|
|
local match=$1
|
|
|
|
# 注意这里要 sleep 3s 等待 openim-authz-server 将新建的密钥同步到其内存中
|
|
|
|
if [ -n "${match}" ]; then
|
|
|
|
echo "wait 3s to allow openim-authz-server to sync information into its memory ..."
|
|
|
|
echo -n "${bold}${red}"
|
|
|
|
sleep 3
|
|
|
|
echo "FAIL!"
|
|
|
|
ret=`$CCURL "${Header}" -H"Authorization: Bearer ${token}" http://${INSECURE_OPENIMAUTO}/v1/authz \
|
|
|
|
echo "${match} is not empty"
|
|
|
|
-d'{"subject":"users:maria","action":"delete","resource":"resources:articles:ladon-introduction","context":{"remoteIPAddress":"192.168.0.5"}}' | grep -Po 'allowed[" :]+\K\w+'`
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
if [ "$ret" != "true" ];then
|
|
|
|
return 1
|
|
|
|
return 1
|
|
|
|
else
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "Successful"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Returns true if the required resource is part of supported resources.
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, /v1/authz test passed!\033[0m')"
|
|
|
|
# Expects env vars:
|
|
|
|
|
|
|
|
# SUPPORTED_RESOURCES: Array of all resources supported by the apiserver. "*"
|
|
|
|
|
|
|
|
# means it supports all resources. For ex: ("*") or ("rc" "*") both mean that
|
|
|
|
|
|
|
|
# all resources are supported.
|
|
|
|
|
|
|
|
# $1: Name of the resource to be tested.
|
|
|
|
|
|
|
|
openim::test::if_supports_resource() {
|
|
|
|
|
|
|
|
SUPPORTED_RESOURCES=${SUPPORTED_RESOURCES:-""}
|
|
|
|
|
|
|
|
REQUIRED_RESOURCE=${1:-""}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
for r in "${SUPPORTED_RESOURCES[@]}"; do
|
|
|
|
|
|
|
|
if [[ "${r}" == "*" || "${r}" == "${REQUIRED_RESOURCE}" ]]; then
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
done
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::version::object_to_file() {
|
|
|
|
openim::test::authzserver()
|
|
|
|
name=$1
|
|
|
|
{
|
|
|
|
flags=${2:-""}
|
|
|
|
openim::test::authz
|
|
|
|
file=$3
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, openim-authz-server test passed!\033[0m')"
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling because "flags" needs to allow for expansion here
|
|
|
|
|
|
|
|
kubectl version ${flags} | grep "${name} Version:" | sed -e s/"${name} Version: "/""/g > "${file}"
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::version::json_object_to_file() {
|
|
|
|
openim::test::pump()
|
|
|
|
flags=$1
|
|
|
|
{
|
|
|
|
file=$2
|
|
|
|
${RCURL} http://${IAM_PUMP_HOST}:7070/healthz | egrep -q 'status.*ok' || {
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
openim::log::error "cannot access openim-pump healthz api, openim-pump maybe down"
|
|
|
|
# Disabling because "flags" needs to allow for expansion here
|
|
|
|
return 1
|
|
|
|
kubectl version ${flags} --output json | sed -e s/' '/''/g -e s/'\"'/''/g -e s/'}'/''/g -e s/'{'/''/g -e s/'clientVersion:'/'clientVersion:,'/ -e s/'serverVersion:'/'serverVersion:,'/ | tr , '\n' > "${file}"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::real_pump_test
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::version::json_client_server_object_to_file() {
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, openim-pump test passed!\033[0m')"
|
|
|
|
flags=$1
|
|
|
|
|
|
|
|
name=$2
|
|
|
|
|
|
|
|
file=$3
|
|
|
|
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
|
|
|
|
# Disabling because "flags" needs to allow for expansion here
|
|
|
|
|
|
|
|
kubectl version ${flags} --output json | jq -r ".${name}" | sed -e s/'\"'/''/g -e s/'}'/''/g -e s/'{'/''/g -e /^$/d -e s/','/''/g -e s/':'/'='/g > "${file}"
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::version::yaml_object_to_file() {
|
|
|
|
# 使用真实的数据测试 openim-pump 是否正常工作
|
|
|
|
flags=$1
|
|
|
|
openim::test::real_pump_test()
|
|
|
|
file=$2
|
|
|
|
{
|
|
|
|
# shellcheck disable=SC2086
|
|
|
|
# 1. 创建访问 openim-authz-server 需要用到的密钥对
|
|
|
|
# Disabling because "flags" needs to allow for expansion here
|
|
|
|
iamctl secret create pumptest &>/dev/null
|
|
|
|
kubectl version ${flags} --output yaml | sed -e s/' '/''/g -e s/'\"'/''/g -e /^$/d > "${file}"
|
|
|
|
|
|
|
|
|
|
|
|
# 2. 使用步骤 1 创建的密钥对生成 JWT Token
|
|
|
|
|
|
|
|
authzAccessToken=`iamctl jwt sign njcho8gJQArsq7zr5v1YpG5NcvL0aeuZ38Ti if70HgRgp021iq5ex2l7pfy5XvgtZM3q` # iamctl jwt sign $secretID $secretKey
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 3. 创建授权策略
|
|
|
|
|
|
|
|
iamctl policy create pumptest '{"metadata":{"name":"policy0"},"policy":{"description":"One policy to rule them all.","subjects":["users:<peter|ken>","users:maria","groups:admins"],"actions":["delete","<create|update>"],"effect":"allow","resources":["resources:articles:<.*>","resources:printer"],"conditions":{"remoteIPAddress":{"type":"CIDRCondition","options":{"cidr":"192.168.0.1/16"}}}}}' &>/dev/null
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 注意这里要 sleep 3s 等待 openim-authz-server 将新建的密钥和授权策略同步到其内存中
|
|
|
|
|
|
|
|
echo "wait 3s to allow openim-authz-server to sync information into its memory ..."
|
|
|
|
|
|
|
|
sleep 3
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 4. 访问 /v1/authz 接口进行资源授权
|
|
|
|
|
|
|
|
$CCURL "${Header}" -H"Authorization: Bearer ${token}" http://${INSECURE_OPENIMAUTO}/v1/authz \
|
|
|
|
|
|
|
|
-d'{"subject":"users:maria","action":"delete","resource":"resources:articles:ladon-introduction","context":{"remoteIPAddress":"192.168.0.5"}}' &>/dev/null
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 这里要 sleep 5s，等待 openim-pump 将 Redis 中的日志，分析并转存到 MongoDB 中
|
|
|
|
|
|
|
|
echo "wait 10s to allow openim-pump analyze and dump authorization log into MongoDB ..."
|
|
|
|
|
|
|
|
sleep 10
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# 5. 查看 MongoDB 中是否有经过解析后的授权日志。
|
|
|
|
|
|
|
|
echo "db.iam_analytics.find()" | mongosh --quiet "${IAM_PUMP_MONGO_URL}" | grep -q "allow access" || {
|
|
|
|
|
|
|
|
openim::log::error "cannot find analyzed authorization log in MongoDB"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
openim::test::version::diff_assert() {
|
|
|
|
openim::test::watcher()
|
|
|
|
local original=$1
|
|
|
|
{
|
|
|
|
local comparator=${2:-"eq"}
|
|
|
|
${RCURL} http://${IAM_WATCHER_HOST}:5050/healthz | egrep -q 'status.*ok' || {
|
|
|
|
local latest=$3
|
|
|
|
openim::log::error "cannot access openim-watcher healthz api, openim-watcher maybe down"
|
|
|
|
local diff_msg=${4:-""}
|
|
|
|
return 1
|
|
|
|
local res=""
|
|
|
|
}
|
|
|
|
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, openim-watcher test passed!\033[0m')"
|
|
|
|
if [ ! -f "${original}" ]; then
|
|
|
|
}
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL! ${diff_msg}"
|
|
|
|
|
|
|
|
echo "the file '${original}' does not exit"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ ! -f "${latest}" ]; then
|
|
|
|
openim::test::iamctl()
|
|
|
|
echo "${bold}${red}"
|
|
|
|
{
|
|
|
|
echo "FAIL! ${diff_msg}"
|
|
|
|
iamctl user list | egrep -q admin || {
|
|
|
|
echo "the file '${latest}' does not exit"
|
|
|
|
openim::log::error "iamctl cannot list users from openim-apiserver"
|
|
|
|
echo "${reset}${red}"
|
|
|
|
return 1
|
|
|
|
caller
|
|
|
|
}
|
|
|
|
echo "${reset}"
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, iamctl test passed!\033[0m')"
|
|
|
|
return 1
|
|
|
|
}
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ "${comparator}" == "exact" ]; then
|
|
|
|
openim::test::man()
|
|
|
|
# Skip sorting of file content for exact comparison.
|
|
|
|
{
|
|
|
|
cp "${original}" "${original}.sorted"
|
|
|
|
man openim-apiserver | grep -q 'OPENIM API Server' || {
|
|
|
|
cp "${latest}" "${latest}.sorted"
|
|
|
|
openim::log::error "openim man page not installed or may not installed properly"
|
|
|
|
else
|
|
|
|
return 1
|
|
|
|
sort "${original}" > "${original}.sorted"
|
|
|
|
}
|
|
|
|
sort "${latest}" > "${latest}.sorted"
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, man test passed!\033[0m')"
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if [ "${comparator}" == "eq" ] || [ "${comparator}" == "exact" ]; then
|
|
|
|
# OpenIM Smoke Test
|
|
|
|
if [ "$(diff -iwB "${original}".sorted "${latest}".sorted)" == "" ] ; then
|
|
|
|
openim::test::smoke()
|
|
|
|
echo -n "${green}"
|
|
|
|
{
|
|
|
|
echo "Successful: ${diff_msg}"
|
|
|
|
openim::test::apiserver
|
|
|
|
echo -n "${reset}"
|
|
|
|
openim::test::authzserver
|
|
|
|
return 0
|
|
|
|
openim::test::pump
|
|
|
|
else
|
|
|
|
openim::test::watcher
|
|
|
|
echo "${bold}${red}"
|
|
|
|
openim::test::iamctl
|
|
|
|
echo "FAIL! ${diff_msg}"
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, smoke test passed!\033[0m')"
|
|
|
|
echo " Expected: "
|
|
|
|
|
|
|
|
cat "${original}"
|
|
|
|
|
|
|
|
echo " Got: "
|
|
|
|
|
|
|
|
cat "${latest}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
if [ -n "$(diff -iwB "${original}".sorted "${latest}".sorted)" ] ; then
|
|
|
|
|
|
|
|
echo -n "${green}"
|
|
|
|
|
|
|
|
echo "Successful: ${diff_msg}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
|
|
|
else
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "FAIL! ${diff_msg}"
|
|
|
|
|
|
|
|
echo " Expected: "
|
|
|
|
|
|
|
|
cat "${original}"
|
|
|
|
|
|
|
|
echo " Got: "
|
|
|
|
|
|
|
|
cat "${latest}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
return 1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
# Force exact match of kubectl stdout, stderr, and return code.
|
|
|
|
# OpenIM Test
|
|
|
|
# $1: file with actual stdout
|
|
|
|
openim::test::test()
|
|
|
|
# $2: file with actual stderr
|
|
|
|
{
|
|
|
|
# $3: the actual return code
|
|
|
|
openim::test::smoke
|
|
|
|
# $4: file with expected stdout
|
|
|
|
openim::test::man
|
|
|
|
# $5: file with expected stderr
|
|
|
|
|
|
|
|
# $6: expected return code
|
|
|
|
|
|
|
|
# $7: additional message describing the invocation
|
|
|
|
|
|
|
|
openim::test::results::diff() {
|
|
|
|
|
|
|
|
local actualstdout=$1
|
|
|
|
|
|
|
|
local actualstderr=$2
|
|
|
|
|
|
|
|
local actualcode=$3
|
|
|
|
|
|
|
|
local expectedstdout=$4
|
|
|
|
|
|
|
|
local expectedstderr=$5
|
|
|
|
|
|
|
|
local expectedcode=$6
|
|
|
|
|
|
|
|
local message=$7
|
|
|
|
|
|
|
|
local result=0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if ! openim::test::version::diff_assert "${expectedstdout}" "exact" "${actualstdout}" "stdout for ${message}"; then
|
|
|
|
|
|
|
|
result=1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
if ! openim::test::version::diff_assert "${expectedstderr}" "exact" "${actualstderr}" "stderr for ${message}"; then
|
|
|
|
|
|
|
|
result=1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
if [ "${actualcode}" -ne "${expectedcode}" ]; then
|
|
|
|
|
|
|
|
echo "${bold}${red}"
|
|
|
|
|
|
|
|
echo "$(openim::test::get_caller): FAIL!"
|
|
|
|
|
|
|
|
echo "Return code for ${message}"
|
|
|
|
|
|
|
|
echo " Expected: ${expectedcode}"
|
|
|
|
|
|
|
|
echo " Got: ${actualcode}"
|
|
|
|
|
|
|
|
echo "${reset}${red}"
|
|
|
|
|
|
|
|
caller
|
|
|
|
|
|
|
|
echo "${reset}"
|
|
|
|
|
|
|
|
result=1
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ "${result}" -eq 0 ]; then
|
|
|
|
openim::log::info "$(echo -e '\033[32mcongratulations, all test passed!\033[0m')"
|
|
|
|
echo -n "${green}"
|
|
|
|
}
|
|
|
|
echo "$(openim::test::get_caller): Successful: ${message}"
|
|
|
|
|
|
|
|
echo -n "${reset}"
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
return "$result"
|
|
|
|
if [[ "$*" =~ openim::test:: ]];then
|
|
|
|
}
|
|
|
|
eval $*
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
Xinwei Xiong
1 year ago
committed by
GitHub