Function TestIntegrationE2ESyncUsers

backend/wireguard/integration_e2e_test.go:608–655

(t *testing.T)

}

func TestIntegrationE2ESyncUsers(t *testing.T) {
	mustHaveCommands(t, "ip", "wg", "curl")

	const (
		iface       = "wg-e2e-sus"
		wgPort      = 51933
		configCIDR  = "10.210.3.1/24"
		allowedUser = "allowed-syncusers@example.com"
		deniedUser  = "denied-syncusers@example.com"
	)

	serverPrivateKey := mustGeneratePrivateKey(t)

	allowedPriv, allowedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate allowed user keys: %v", err)
	}
	deniedPriv, deniedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate denied user keys: %v", err)
	}

	configJSON := fmt.Sprintf(
		`{"interface_name":"%s","listen_port":%d,"private_key":"%s","address":["%s"],"tag":"test-node"}`,
		iface, wgPort, serverPrivateKey, configCIDR,
	)
	wg := createTestWireGuard(t, configJSON)
	defer wg.Shutdown()

	users := []*common.User{
		buildWGUser(allowedUser, allowedPub, "10.210.3.2/32", iface, true),
		buildWGUser(deniedUser, deniedPub, "10.210.3.3/32", iface, false),
	}
	if err := wg.SyncUsers(context.Background(), users); err != nil {
		t.Fatalf("failed SyncUsers: %v", err)
	}

	url, serverWGIP := startWGHTTPServer(t, wg)
	serverPublicKey := wireGuardServerPublicKey(t, wg)

	allowedNS := createNamespaceFixture(t, 65)
	deniedNS := createNamespaceFixture(t, 66)

	configureNamespaceWGClient(t, allowedNS, "wgc0", allowedPriv, mustUserPeerIP(t, wg, allowedUser), serverPublicKey, wgPort, serverWGIP)
	configureNamespaceWGClient(t, deniedNS, "wgc1", deniedPriv, "10.210.3.250", serverPublicKey, wgPort, serverWGIP)

	runConnectDisconnectAssertions(t, wg, allowedUser, deniedUser, allowedNS.name, deniedNS.name, url)
}

func TestIntegrationE2EUpdateUsers(t *testing.T) {
	mustHaveCommands(t, "ip", "wg", "curl")