mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-04 10:42:23 +00:00
Andras Bacsai
a331f91c49
- SecretManagerLinks: validate settings when the integration token changes, and save only validated keys - Service Domains: lock domainRows - Server DockerImages: lock images
94 lines
3.8 KiB
PHP
94 lines
3.8 KiB
PHP
<?php
|
|
|
|
use App\Livewire\Project\Shared\SecretManagerLinks;
|
|
use App\Models\Application;
|
|
use App\Models\Environment;
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\IntegrationToken;
|
|
use App\Models\Project;
|
|
use App\Models\Server;
|
|
use App\Models\Team;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Livewire\Livewire;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
Server::flushIdentityMap();
|
|
$this->withoutDefer();
|
|
InstanceSettings::unguarded(fn () => InstanceSettings::updateOrCreate(['id' => 0], ['id' => 0]));
|
|
|
|
$this->team = Team::factory()->create();
|
|
$this->user = User::factory()->create();
|
|
$this->team->members()->attach($this->user->id, ['role' => 'owner']);
|
|
session(['currentTeam' => $this->team]);
|
|
$this->actingAs($this->user);
|
|
|
|
$server = Server::factory()->create(['team_id' => $this->team->id]);
|
|
$destination = $server->standaloneDockers()->firstOrFail();
|
|
$project = Project::factory()->create(['team_id' => $this->team->id]);
|
|
$environment = Environment::factory()->create(['project_id' => $project->id]);
|
|
$this->application = Application::factory()->create([
|
|
'environment_id' => $environment->id,
|
|
'destination_id' => $destination->id,
|
|
'destination_type' => $destination->getMorphClass(),
|
|
]);
|
|
|
|
$vaultToken = fn (string $name) => IntegrationToken::query()->create([
|
|
'team_id' => $this->team->id,
|
|
'provider' => 'vault',
|
|
'name' => $name,
|
|
'token' => 'hvs.token',
|
|
'capabilities' => ['secrets'],
|
|
'metadata' => ['base_url' => 'https://vault.internal:8200'],
|
|
]);
|
|
$this->currentToken = $vaultToken('Vault current');
|
|
$this->nextToken = $vaultToken('Vault next');
|
|
|
|
$this->application->secretManagerLink()->create([
|
|
'integration_token_id' => $this->currentToken->id,
|
|
'settings' => ['mount' => 'secret', 'path' => 'my-app/production'],
|
|
]);
|
|
});
|
|
|
|
test('switching to a token of the same provider rejects invalid settings and keeps the saved source', function () {
|
|
Livewire::test(SecretManagerLinks::class, ['resource' => $this->application])
|
|
->set([
|
|
'settings' => ['mount' => ['nested' => 'value'], 'path' => 'my-app/production'],
|
|
'integration_token_uuid' => $this->nextToken->uuid,
|
|
])
|
|
->assertHasErrors(['settings.mount']);
|
|
|
|
$link = $this->application->secretManagerLink()->firstOrFail();
|
|
expect($link->integration_token_id)->toBe($this->currentToken->id)
|
|
->and($link->settings)->toBe(['mount' => 'secret', 'path' => 'my-app/production']);
|
|
});
|
|
|
|
test('switching to a token of the same provider saves only the provider settings fields', function () {
|
|
Livewire::test(SecretManagerLinks::class, ['resource' => $this->application])
|
|
->set([
|
|
'settings' => ['mount' => 'kv', 'path' => 'my-app/staging', 'unexpected' => 'value'],
|
|
'integration_token_uuid' => $this->nextToken->uuid,
|
|
])
|
|
->assertHasNoErrors()
|
|
->assertDispatched('success');
|
|
|
|
$link = $this->application->secretManagerLink()->firstOrFail();
|
|
expect($link->integration_token_id)->toBe($this->nextToken->id)
|
|
->and($link->settings)->toBe(['mount' => 'kv', 'path' => 'my-app/staging']);
|
|
});
|
|
|
|
test('switching to a token of the same provider keeps working while the settings are still empty', function () {
|
|
$this->application->secretManagerLink()->update(['settings' => null]);
|
|
|
|
Livewire::test(SecretManagerLinks::class, ['resource' => $this->application])
|
|
->set('integration_token_uuid', $this->nextToken->uuid)
|
|
->assertHasNoErrors()
|
|
->assertDispatched('success');
|
|
|
|
$link = $this->application->secretManagerLink()->firstOrFail();
|
|
expect($link->integration_token_id)->toBe($this->nextToken->id)
|
|
->and($link->settings)->toBeNull();
|
|
});
|