Function TestGCEPlugin

security/pkg/credentialfetcher/plugin/gce_test.go:176–235

(t *testing.T)

}

func TestGCEPlugin(t *testing.T) {
	testCases := map[string]struct {
		jwt           string
		jwtPath       string
		expectedToken string
		expectedCall  int
		expectedErr   error
	}{
		"get VM credential": {
			jwt:           thirdPartyJwt,
			jwtPath:       fmt.Sprintf("/tmp/security-pkg-credentialfetcher-plugin-gcetest-%s", uuid.New().String()),
			expectedToken: thirdPartyJwt,
			expectedCall:  1,
		},
		"jwt path not set": {
			jwt:          thirdPartyJwt,
			expectedCall: 1,
			expectedErr:  fmt.Errorf("jwtPath is unset"),
		},
		"fetch credential multiple times": {
			expectedCall: 5,
			jwtPath:      fmt.Sprintf("/tmp/security-pkg-credentialfetcher-plugin-gcetest-%s", uuid.New().String()),
		},
	}

	SetTokenRotation(false)
	ms, err := StartMetadataServer()
	if err != nil {
		t.Fatalf("StartMetadataServer() returns err: %v", err)
	}
	t.Cleanup(func() {
		ms.Stop()
		SetTokenRotation(true)
	})

	for id, tc := range testCases {
		p := GCEPlugin{
			tokenCache: tc.jwt,
			jwtPath:    tc.jwtPath,
		}
		if err := creatJWTFile(tc.jwtPath); err != nil {
			t.Fatalf("%s, creatJWTFile() returns err: %v", id, err)
		}
		ms.Reset()
		ms.setToken(tc.jwt)

		tokens, errs := getTokenFromServer(t, &p, tc.expectedCall)

		verifyError(t, id, errs, tc.expectedErr)
		if tc.expectedErr == nil {
			if ms.NumGetTokenCall() != tc.expectedCall {
				t.Errorf("%s, metadata server receives %d calls, want %d",
					id, ms.NumGetTokenCall(), tc.expectedCall)
			}
			if tc.jwtPath != "" {
				verifyToken(t, id, tc.jwtPath, tokens, tc.expectedToken)
			}
		}