Michael Li
2d920805d4
* chore: Update make testacc to use boundary dev Use boundary dev instead of test controller in order to get an enterprise cluster * test: Update tests to use boundary dev cluster - Set up environment variables via loadTestConfig - Update testConfigWithRecovery to use recovery key from config - Update testCOnfigWithoutAMPWCredentials to use boundary dev's auth method * test: Update tests to use their own orgs This is to address some test failures due to conflicts when creating resources within the same org. * test: Enable tests that require boundary-enterprise * chore: Update workflow to use boundary enterprise
112 lines
3.9 KiB
Go
112 lines
3.9 KiB
Go
// Copyright IBM Corp. 2020, 2026
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
package provider
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/hashicorp/boundary/api/managedgroups"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/id"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
|
|
"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
var (
|
|
fooManagedGroupLdap = fmt.Sprintf(`
|
|
resource "boundary_managed_group_ldap" "foo" {
|
|
name = "%s"
|
|
description = "%s"
|
|
auth_method_id = boundary_auth_method_ldap.test-ldap.id
|
|
group_names = ["admin", "users"]
|
|
}`, managedGroupName, managedGroupDescription)
|
|
|
|
fooManagedGroupLdapUpdate = fmt.Sprintf(`
|
|
resource "boundary_managed_group_ldap" "foo" {
|
|
name = "%s"
|
|
description = "%s"
|
|
auth_method_id = boundary_auth_method_ldap.test-ldap.id
|
|
group_names = ["admin-updated", "users-updated"]
|
|
}`, managedGroupName+managedGroupUpdate, managedGroupDescription+managedGroupUpdate)
|
|
)
|
|
|
|
func TestAccManagedGroupLdap(t *testing.T) {
|
|
cfg, err := loadTestConfig()
|
|
require.NoError(t, err)
|
|
url := cfg.BoundaryAddr
|
|
suffix := id.UniqueId()
|
|
|
|
createConfig := fmt.Sprintf(testAuthMethodLdap, testAuthMethodLdapDesc, testAuthMethodLdapCert)
|
|
|
|
var provider *schema.Provider
|
|
resource.Test(t, resource.TestCase{
|
|
ProviderFactories: providerFactories(&provider),
|
|
CheckDestroy: testAccCheckManagedGroupResourceDestroy(t, provider, ldapManagedGroupType),
|
|
Steps: []resource.TestStep{
|
|
{
|
|
// test create
|
|
Config: testConfig(url, fooOrg(suffix), createConfig, fooManagedGroupLdap),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckManagedGroupResourceExists(provider, "boundary_managed_group_ldap.foo"),
|
|
resource.TestCheckResourceAttr("boundary_managed_group_ldap.foo", DescriptionKey, managedGroupDescription),
|
|
resource.TestCheckResourceAttr("boundary_managed_group_ldap.foo", NameKey, managedGroupName),
|
|
testAccCheckManagedGrpAttrAryValueSet(provider, "boundary_managed_group_ldap.foo", managedGroupLdapGroupNamesKey, []string{"admin", "users"}),
|
|
),
|
|
},
|
|
importStep("boundary_managed_group_ldap.foo"),
|
|
{
|
|
// test update
|
|
Config: testConfig(url, fooOrg(suffix), createConfig, fooManagedGroupLdapUpdate),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckManagedGroupResourceExists(provider, "boundary_managed_group_ldap.foo"),
|
|
resource.TestCheckResourceAttr("boundary_managed_group_ldap.foo", DescriptionKey, managedGroupDescription+managedGroupUpdate),
|
|
resource.TestCheckResourceAttr("boundary_managed_group_ldap.foo", NameKey, managedGroupName+managedGroupUpdate),
|
|
testAccCheckManagedGrpAttrAryValueSet(provider, "boundary_managed_group_ldap.foo", managedGroupLdapGroupNamesKey, []string{"admin-updated", "users-updated"}),
|
|
),
|
|
},
|
|
importStep("boundary_managed_group_ldap.foo"),
|
|
},
|
|
})
|
|
}
|
|
|
|
func testAccCheckManagedGrpAttrAryValueSet(testProvider *schema.Provider, name string, key string, strAry []string) resource.TestCheckFunc {
|
|
return func(s *terraform.State) error {
|
|
rs, ok := s.RootModule().Resources[name]
|
|
if !ok {
|
|
return fmt.Errorf("auth method resource not found: %s", name)
|
|
}
|
|
|
|
id := rs.Primary.ID
|
|
if id == "" {
|
|
return fmt.Errorf("auth method resource ID is not set")
|
|
}
|
|
|
|
md := testProvider.Meta().(*metaData)
|
|
grpClient := managedgroups.NewClient(md.client)
|
|
|
|
amr, err := grpClient.Read(context.Background(), id)
|
|
if err != nil {
|
|
return fmt.Errorf("Got an error when reading auth method %q: %v", id, err)
|
|
}
|
|
|
|
for _, got := range amr.Item.Attributes[key].([]interface{}) {
|
|
ok := false
|
|
for _, expected := range strAry {
|
|
if strings.TrimSpace(got.(string)) == strings.TrimSpace(expected) {
|
|
ok = true
|
|
}
|
|
}
|
|
if !ok {
|
|
return fmt.Errorf("value not found in boundary\n %s: %s\n", key, got.(string))
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|