mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 13:39:37 +08:00
Zac Bergquist
2ae9d770fc
* Move configuration from lib/service to lib/service/servicecfg The new servicecfg package will hold only configuration for services. This will allow other packages (like tctl and tsh) to depend on servicecfg without pulling in all of lib/service (which has a number of platform-specific details). This is the first step towards being able to build tctl for Windows. * Move PAM and BPF config into servicecfg This breaks a compile-time dependency on BPF/PAM for tctl.
109 lines
3.4 KiB
Go
109 lines
3.4 KiB
Go
// Copyright 2022 Gravitational, Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package db
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"io"
|
|
"net/http"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/gravitational/teleport/api/types"
|
|
"github.com/gravitational/teleport/integration/helpers"
|
|
"github.com/gravitational/teleport/lib/defaults"
|
|
"github.com/gravitational/teleport/lib/service/servicecfg"
|
|
"github.com/gravitational/teleport/lib/services"
|
|
"github.com/gravitational/teleport/lib/web/ui"
|
|
)
|
|
|
|
type listDatabaseServicesResp struct {
|
|
Items []ui.DatabaseService `json:"items"`
|
|
}
|
|
|
|
func TestDatabaseServiceHeartbeat(t *testing.T) {
|
|
ctx := context.Background()
|
|
|
|
// Start Teleport Auth and Proxy services
|
|
authProcess, proxyProcess, provisionToken := helpers.MakeTestServers(t)
|
|
authServer := authProcess.GetAuthServer()
|
|
|
|
proxyAddr, err := proxyProcess.ProxyWebAddr()
|
|
require.NoError(t, err)
|
|
|
|
resMatchers := []services.ResourceMatcher{
|
|
{Labels: types.Labels{"env": []string{"stg", "qa"}}},
|
|
{Labels: types.Labels{"aws-tag": []string{"dev"}}},
|
|
}
|
|
|
|
// Start Teleport Database Service
|
|
helpers.MakeTestDatabaseServer(t, *proxyAddr, provisionToken, resMatchers, servicecfg.Database{
|
|
Name: "dummydb",
|
|
Protocol: defaults.ProtocolPostgres,
|
|
URI: "127.0.0.1:0",
|
|
})
|
|
|
|
roleWithRODBService, err := types.NewRole("ro_dbservices", types.RoleSpecV6{
|
|
Allow: types.RoleConditions{
|
|
DatabaseServiceLabels: types.Labels{types.Wildcard: []string{types.Wildcard}},
|
|
Rules: []types.Rule{
|
|
types.NewRule(types.KindDatabaseService, services.RO()),
|
|
},
|
|
},
|
|
})
|
|
require.NoError(t, err)
|
|
require.NoError(t, authServer.UpsertRole(ctx, roleWithRODBService))
|
|
|
|
// Set up User
|
|
teleportUser := "user123"
|
|
user, err := types.NewUser(teleportUser)
|
|
require.NoError(t, err)
|
|
|
|
user.AddRole(roleWithRODBService.GetName())
|
|
require.NoError(t, authServer.UpsertUser(user))
|
|
|
|
userPassword := uuid.NewString()
|
|
require.NoError(t, authServer.UpsertPassword(teleportUser, []byte(userPassword)))
|
|
|
|
webPack := helpers.LoginWebClient(t, proxyAddr.String(), teleportUser, userPassword)
|
|
|
|
// List Database Services
|
|
listDBServicesEndpoint := strings.Join([]string{"sites", "$site", "databaseservices"}, "/")
|
|
resp, err := webPack.DoRequest(http.MethodGet, listDBServicesEndpoint, nil)
|
|
require.NoError(t, err)
|
|
|
|
respBody, err := io.ReadAll(resp.Body)
|
|
require.NoError(t, err)
|
|
|
|
defer resp.Body.Close()
|
|
require.Equal(t, http.StatusOK, resp.StatusCode, string(respBody))
|
|
|
|
var listResp listDatabaseServicesResp
|
|
require.NoError(t, json.Unmarshal(respBody, &listResp))
|
|
|
|
require.Len(t, listResp.Items, 1)
|
|
dbServic01 := listResp.Items[0]
|
|
expectedDBResourceMatcher := []*types.DatabaseResourceMatcher{
|
|
{Labels: &types.Labels{"env": []string{"stg", "qa"}}},
|
|
{Labels: &types.Labels{"aws-tag": []string{"dev"}}},
|
|
}
|
|
|
|
require.Equal(t, expectedDBResourceMatcher, dbServic01.ResourceMatchers)
|
|
}
|