Michael Li
2d920805d4
* chore: Update make testacc to use boundary dev Use boundary dev instead of test controller in order to get an enterprise cluster * test: Update tests to use boundary dev cluster - Set up environment variables via loadTestConfig - Update testConfigWithRecovery to use recovery key from config - Update testCOnfigWithoutAMPWCredentials to use boundary dev's auth method * test: Update tests to use their own orgs This is to address some test failures due to conflicts when creating resources within the same org. * test: Enable tests that require boundary-enterprise * chore: Update workflow to use boundary enterprise
134 lines
4.4 KiB
Go
134 lines
4.4 KiB
Go
// Copyright IBM Corp. 2020, 2026
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
package provider
|
|
|
|
import (
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/YakDriver/regexache"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/id"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
const (
|
|
testRoleName = "my_role"
|
|
)
|
|
|
|
func roleReadGlobal(suffix string) string {
|
|
name := testRoleName + "-" + suffix
|
|
return fmt.Sprintf(`
|
|
resource "boundary_user" "user" {
|
|
name = "my_user-%s"
|
|
scope_id = "global"
|
|
}
|
|
|
|
resource "boundary_role" "role" {
|
|
name = "%s"
|
|
description = "test role global"
|
|
scope_id = "global"
|
|
grant_strings = [
|
|
"ids=*;type=*;actions=read"
|
|
]
|
|
principal_ids = [ boundary_user.user.id ]
|
|
}
|
|
|
|
data "boundary_role" "role" {
|
|
depends_on = [ boundary_role.role ]
|
|
name = "%s"
|
|
}
|
|
`, suffix, name, name)
|
|
}
|
|
|
|
var roleReadOrg = fmt.Sprintf(`
|
|
resource "boundary_user" "user" {
|
|
name = "my_user"
|
|
scope_id = "global"
|
|
}
|
|
|
|
resource "boundary_role" "role" {
|
|
name = "%s"
|
|
description = "test role org"
|
|
scope_id = boundary_scope.org1.id
|
|
grant_strings = [
|
|
"ids=*;type=*;actions=read"
|
|
]
|
|
principal_ids = [ boundary_user.user.id ]
|
|
}
|
|
|
|
data "boundary_role" "role" {
|
|
depends_on = [ boundary_role.role ]
|
|
name = "%s"
|
|
scope_id = boundary_scope.org1.id
|
|
}
|
|
`, testRoleName, testRoleName)
|
|
|
|
func TestAccRoleReadGlobal(t *testing.T) {
|
|
cfg, err := loadTestConfig()
|
|
require.NoError(t, err)
|
|
url := cfg.BoundaryAddr
|
|
suffix := id.UniqueId()
|
|
|
|
dataSourceName := "data.boundary_role.role"
|
|
|
|
var provider *schema.Provider
|
|
resource.Test(t, resource.TestCase{
|
|
ProviderFactories: providerFactories(&provider),
|
|
Steps: []resource.TestStep{
|
|
{
|
|
Config: testConfig(url, roleReadGlobal(suffix)),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
resource.TestCheckResourceAttrSet(dataSourceName, IDKey),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, ScopeIdKey),
|
|
resource.TestMatchResourceAttr(dataSourceName, NameKey, regexache.MustCompile(`^`+testRoleName)),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, DescriptionKey),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", roleGrantStringsKey), "1"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.0", roleGrantStringsKey), "ids=*;type=*;actions=read"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", roleGrantScopeIdsKey), "1"),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, "scope.0.id"),
|
|
resource.TestCheckResourceAttr(dataSourceName, "scope.0.name", "global"),
|
|
resource.TestCheckResourceAttr(dataSourceName, "scope.0.type", "global"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", rolePrincipalIdsKey), "1"),
|
|
resource.TestCheckResourceAttrPair(dataSourceName, fmt.Sprintf("%s.0", rolePrincipalIdsKey), "boundary_user.user", "id"),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccRoleReadOrg(t *testing.T) {
|
|
cfg, err := loadTestConfig()
|
|
require.NoError(t, err)
|
|
url := cfg.BoundaryAddr
|
|
suffix := id.UniqueId()
|
|
|
|
dataSourceName := "data.boundary_role.role"
|
|
|
|
var provider *schema.Provider
|
|
resource.Test(t, resource.TestCase{
|
|
ProviderFactories: providerFactories(&provider),
|
|
Steps: []resource.TestStep{
|
|
{
|
|
Config: testConfig(url, fooOrg(suffix), roleReadOrg),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
resource.TestCheckResourceAttrSet(dataSourceName, IDKey),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, ScopeIdKey),
|
|
resource.TestCheckResourceAttr(dataSourceName, NameKey, testRoleName),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, DescriptionKey),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", roleGrantStringsKey), "1"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.0", roleGrantStringsKey), "ids=*;type=*;actions=read"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", roleGrantScopeIdsKey), "1"),
|
|
resource.TestCheckResourceAttrSet(dataSourceName, "scope.0.id"),
|
|
resource.TestMatchResourceAttr(dataSourceName, "scope.0.name", regexache.MustCompile(`^org1-`)),
|
|
resource.TestCheckResourceAttr(dataSourceName, "scope.0.type", "org"),
|
|
resource.TestCheckResourceAttr(dataSourceName, fmt.Sprintf("%s.#", rolePrincipalIdsKey), "1"),
|
|
resource.TestCheckResourceAttrPair(dataSourceName, fmt.Sprintf("%s.0", rolePrincipalIdsKey), "boundary_user.user", "id"),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|