Function TestLoadByPathMultiFileLoading

pkg/appsec/appsec_config_test.go:159–195

(t *testing.T)

}

func TestLoadByPathMultiFileLoading(t *testing.T) {
	cfg := newTestConfig()

	// First file: old format
	f1 := writeTempYAML(t, `
name: test-multi
inband_rules:
  - crowdsecurity/base-config
on_match:
  - filter: "IsInBand == true"
    apply:
      - SendAlert()
`)

	// Second file: new format
	dir := t.TempDir()
	f2 := filepath.Join(dir, "config2.yaml")
	require.NoError(t, os.WriteFile(f2, []byte(`
inband:
  rules:
    - crowdsecurity/vpatch-*
  on_match:
    - apply:
        - SetReturnCode(413)
`), 0o644))

	require.NoError(t, cfg.LoadByPath(f1))
	require.NoError(t, cfg.LoadByPath(f2))

	// Rules merged from both files
	assert.Equal(t, []string{"crowdsecurity/base-config", "crowdsecurity/vpatch-*"}, cfg.InBandRules)
	// Shared hook from file 1
	assert.Len(t, cfg.OnMatch, 1)
	// Phase-scoped hook from file 2
	require.NotNil(t, cfg.InBand)
	assert.Len(t, cfg.InBand.OnMatch, 1)
}

func TestLoadByPathPhaseOptionsOverride(t *testing.T) {
	cfg := newTestConfig()