mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 03:46:29 +02:00
5d60cff21e
* refactor backend, implement encrypted store * refactor in-memory store * wip * wip * wip * add syncer test * fix redis expiry * fix linting issues * fix test by skipping non-config records * fix backoff import * fix init issues * fix query * wait for initial sync before starting directory sync * add type to SyncLatest * add more log messages, fix deadlock in in-memory store, always return server version from SyncLatest * update sync types and tests * add redis tests * skip macos in github actions * add comments to proto * split getBackend into separate methods * handle errors in initVersion * return different error for not found vs other errors in get * use exponential backoff for redis transaction retry * rename raw to result * use context instead of close channel * store type urls as constants in databroker * use timestampb instead of ptypes * fix group merging not waiting * change locked names * update GetAll to return latest record version * add method to grpcutil to get the type url for a protobuf type
105 lines
2.2 KiB
Go
105 lines
2.2 KiB
Go
package testutil
|
|
|
|
import (
|
|
"context"
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"path/filepath"
|
|
"time"
|
|
|
|
"github.com/go-redis/redis/v8"
|
|
"github.com/ory/dockertest/v3"
|
|
|
|
"github.com/pomerium/pomerium/pkg/cryptutil"
|
|
)
|
|
|
|
const maxWait = time.Minute
|
|
|
|
// WithTestRedis creates a test a test redis instance using docker.
|
|
func WithTestRedis(useTLS bool, handler func(rawURL string) error) error {
|
|
ctx, clearTimeout := context.WithTimeout(context.Background(), maxWait)
|
|
defer clearTimeout()
|
|
|
|
// uses a sensible default on windows (tcp/http) and linux/osx (socket)
|
|
pool, err := dockertest.NewPool("")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
opts := &dockertest.RunOptions{
|
|
Repository: "redis",
|
|
Tag: "6",
|
|
}
|
|
scheme := "redis"
|
|
if useTLS {
|
|
opts.Mounts = []string{
|
|
filepath.Join(TestDataRoot(), "tls") + ":/tls",
|
|
}
|
|
opts.Cmd = []string{
|
|
"--port", "0",
|
|
"--tls-port", "6379",
|
|
"--tls-cert-file", "/tls/redis.crt",
|
|
"--tls-key-file", "/tls/redis.key",
|
|
"--tls-ca-cert-file", "/tls/ca.crt",
|
|
}
|
|
scheme = "rediss"
|
|
}
|
|
|
|
resource, err := pool.RunWithOptions(opts)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_ = resource.Expire(uint(maxWait.Seconds()))
|
|
|
|
redisURL := fmt.Sprintf("%s://%s/0", scheme, resource.GetHostPort("6379/tcp"))
|
|
if err := pool.Retry(func() error {
|
|
options, err := redis.ParseURL(redisURL)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if useTLS {
|
|
options.TLSConfig = RedisTLSConfig()
|
|
}
|
|
|
|
client := redis.NewClient(options)
|
|
defer client.Close()
|
|
|
|
return client.Ping(ctx).Err()
|
|
}); err != nil {
|
|
_ = pool.Purge(resource)
|
|
return err
|
|
}
|
|
|
|
e := handler(redisURL)
|
|
|
|
if err := pool.Purge(resource); err != nil {
|
|
return err
|
|
}
|
|
|
|
return e
|
|
}
|
|
|
|
// RedisTLSConfig returns the TLS Config to use with redis.
|
|
func RedisTLSConfig() *tls.Config {
|
|
cert, err := cryptutil.CertificateFromFile(
|
|
filepath.Join(TestDataRoot(), "tls", "redis.crt"),
|
|
filepath.Join(TestDataRoot(), "tls", "redis.key"),
|
|
)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
caCertPool := x509.NewCertPool()
|
|
caCert, err := ioutil.ReadFile(filepath.Join(TestDataRoot(), "tls", "ca.crt"))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
caCertPool.AppendCertsFromPEM(caCert)
|
|
tlsConfig := &tls.Config{
|
|
RootCAs: caCertPool,
|
|
Certificates: []tls.Certificate{*cert},
|
|
MinVersion: tls.VersionTLS12,
|
|
}
|
|
return tlsConfig
|
|
}
|