Function TestConfig_MergeWithEncryptedFile

internal/config/config_test.go:626–662

(t *testing.T)

}

func TestConfig_MergeWithEncryptedFile(t *testing.T) {
	if _, err := exec.LookPath("sops"); err != nil {
		t.Skip("sops binary not available")
	}

	if os.Getenv("CI") != "" {
		t.Skip("Skipping encrypted file test in CI environment")
	}

	tempDir := t.TempDir()

	id, err := age.GenerateX25519Identity()
	require.NoError(t, err)

	keyPath := filepath.Join(tempDir, "key.txt")
	require.NoError(t, os.WriteFile(keyPath, []byte(id.String()), 0o600))

	plainPath := filepath.Join(tempDir, "plain.yaml")
	require.NoError(t, os.WriteFile(plainPath, []byte("addr: https://enc.example.com\nuser: encuser\n"), 0o600))

	// nolint:gosec // This is test code with controlled input
	cmd := exec.Command("sops", "--encrypt", "--input-type", "yaml", "--output-type", "yaml", "--age", id.Recipient().String(), plainPath)

	out, err := cmd.CombinedOutput()
	if err != nil {
		t.Skipf("sops encryption failed: %v\nstderr: %s", err, string(out))
	}

	encPath := filepath.Join(tempDir, "config.enc.yaml")
	require.NoError(t, os.WriteFile(encPath, out, 0o600))

	cfg := &Config{}
	err = cfg.MergeWithFile(encPath)
	require.NoError(t, err)
	assert.Equal(t, "https://enc.example.com", cfg.Addr)
	assert.Equal(t, "encuser", cfg.User)
}

func TestConfig_SetDefaults(t *testing.T) {
	config := &Config{}