Function TestHandleK8sDelete

pkg/allocator/allocator_test.go:468–526

TestHandleK8sDelete tests the behavior of the allocator of handling OnDelete events when master key protection is enabled vs disabled.

(t *testing.T)

// TestHandleK8sDelete tests the behavior of the allocator of handling OnDelete events
// when master key protection is enabled vs disabled.
func TestHandleK8sDelete(t *testing.T) {

	masterKeyRecreateMaxInterval = time.Millisecond
	backend := newDummyBackend()

	alloc, err := NewAllocator(hivetest.Logger(t), TestAllocatorKey(""), backend)
	alloc.idPool = idpool.NewIDPool(1234, 1234)
	alloc.enableMasterKeyProtection = true
	require.NoError(t, err)

	_, newlyAllocated, first, err := alloc.Allocate(context.Background(), TestAllocatorKey("foo"))
	require.NoError(t, err)
	require.True(t, first)
	require.True(t, newlyAllocated)

	var counter atomic.Uint32
	backend.setUpdateMasterKeyMutator(func(ctx context.Context, id idpool.ID, key AllocatorKey) error {
		counter.Add(1)
		if counter.Load() <= 2 {
			return fmt.Errorf("updateKey failed: %d", counter.Load())
		}
		return nil
	})

	assertBackendContains := func(t assert.TestingT, id int, key string) {
		k, err := backend.GetByID(context.TODO(), idpool.ID(id))
		assert.NoError(t, err)
		assert.Equal(t, key, k.GetKey())
	}

	// 1. Simulate a delete event, where master key protection is enabled
	// and the identity is owned locally.
	assertBackendContains(t, 1234, "foo")

	alloc.mainCache.OnDelete(1234, TestAllocatorKey("foo"))
	// Check that the identity was retried multiple times by master key protection.
	assert.EventuallyWithT(t, func(c *assert.CollectT) {
		assert.Equal(c, uint32(3), counter.Load())
	}, time.Second, time.Millisecond)

	assert.Contains(t, alloc.mainCache.nextCache, idpool.ID(1234))
	assert.Contains(t, alloc.mainCache.nextKeyCache, "foo")

	// 2. Simulate a delete event, where master key protection is disabled.
	alloc.enableMasterKeyProtection = false
	alloc.mainCache.OnDelete(1234, TestAllocatorKey("foo"))
	assert.NotContains(t, alloc.mainCache.nextCache, idpool.ID(1234))
	assert.NotContains(t, alloc.mainCache.nextKeyCache, "foo")

	// 3. Simulate delete event where master key protection is enabled
	// but the identity is not owned locally.
	alloc.enableMasterKeyProtection = true
	alloc.mainCache.OnUpsert(4321, TestAllocatorKey("bar"))
	assert.Contains(t, alloc.mainCache.nextCache, idpool.ID(4321))
	assert.Contains(t, alloc.mainCache.nextKeyCache, "bar")
	alloc.mainCache.OnDelete(idpool.ID(4321), TestAllocatorKey("bar"))
	assert.NotContains(t, alloc.mainCache.nextCache, idpool.ID(4321))
	assert.NotContains(t, alloc.mainCache.nextKeyCache, "bar")