Jeff Mitchell
5716a30813
* Add more logging to worker auth rotation and test flags This makes it much easier to figure out when and why rotation is happening and control it for tests/debugging. * Update auth rotation logic Because we were looking at validity period of client certs, which may not have matched the actual rotation interval, it was possible (mostly in test scenarios) for the rotation to happen multiple times on the roots before we actually hit the worker rotation interval. This changes how the interval is calculated by looking at the difference between not-after values on the certs to understand the rotation interval being used by the controller. We then use that as the starting point for calculating a next-rotation time.
25 lines
697 B
Go
25 lines
697 B
Go
package servers
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func Test_GetOpts(t *testing.T) {
|
|
t.Parallel()
|
|
t.Run("WithRotationFrequency", func(t *testing.T) {
|
|
testOpts := getDefaultOptions()
|
|
assert.Equal(t, testOpts.withRotationFrequency, defaultRotationFrequency)
|
|
opts := getOpts(WithRotationFrequency(time.Minute))
|
|
assert.Equal(t, time.Minute, opts.withRotationFrequency)
|
|
})
|
|
t.Run("WithCertificateLifetime", func(t *testing.T) {
|
|
testOpts := getDefaultOptions()
|
|
assert.Equal(t, testOpts.withCertificateLifetime, time.Duration(0))
|
|
opts := getOpts(WithCertificateLifetime(time.Minute))
|
|
assert.Equal(t, time.Minute, opts.withCertificateLifetime)
|
|
})
|
|
}
|