102 lines
3.3 KiB
Python
102 lines
3.3 KiB
Python
"""
|
|
Tests for OCI Config CRUD operations.
|
|
"""
|
|
import io
|
|
import pytest
|
|
|
|
# Dummy PEM key for uploads (valid RSA format header/footer, not a real key)
|
|
_DUMMY_PEM = b"""-----BEGIN RSA PRIVATE KEY-----
|
|
MIIBogIBAAJBALRiMLAHudeSA/x3hB2f+2NRkJmcOUNKwNuvTT0GKQFYSNDF0FNv
|
|
TESTDATAFORTHEMOCKPEMFILEXYZABC0123456789ABCDEF0123456789
|
|
-----END RSA PRIVATE KEY-----
|
|
"""
|
|
|
|
# Module-level storage for IDs across ordered tests
|
|
_state: dict = {}
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_create_oci_config(client, admin_headers):
|
|
"""POST /api/oci/config — create via multipart form."""
|
|
r = await client.post(
|
|
"/api/oci/config",
|
|
data={
|
|
"tenancy_name": "TestTenancy",
|
|
"tenancy_ocid": "ocid1.tenancy.oc1..test",
|
|
"user_ocid": "ocid1.user.oc1..test",
|
|
"fingerprint": "aa:bb:cc:dd",
|
|
"region": "us-ashburn-1",
|
|
"compartment_id": "ocid1.compartment.oc1..test",
|
|
"auth_type": "api_key",
|
|
},
|
|
files={"private_key": ("key.pem", io.BytesIO(_DUMMY_PEM), "application/x-pem-file")},
|
|
headers=admin_headers,
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
body = r.json()
|
|
assert "id" in body
|
|
_state["cid"] = body["id"]
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_list_oci_configs(client, admin_headers):
|
|
"""GET /api/oci/configs — list must include the created config."""
|
|
r = await client.get("/api/oci/configs", headers=admin_headers)
|
|
assert r.status_code == 200
|
|
configs = r.json()
|
|
assert isinstance(configs, list)
|
|
assert any(c["id"] == _state["cid"] for c in configs)
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_update_oci_config(client, admin_headers):
|
|
"""PUT /api/oci/configs/{cid} — update tenancy_name via multipart form."""
|
|
cid = _state["cid"]
|
|
r = await client.put(
|
|
f"/api/oci/configs/{cid}",
|
|
data={
|
|
"tenancy_name": "Updated",
|
|
"region": "us-ashburn-1",
|
|
},
|
|
headers=admin_headers,
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_delete_oci_config(client, admin_headers):
|
|
"""DELETE /api/oci/configs/{cid} — remove config."""
|
|
cid = _state["cid"]
|
|
r = await client.delete(f"/api/oci/configs/{cid}", headers=admin_headers)
|
|
assert r.status_code == 200, r.text
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_user_isolation(client, admin_headers, user_headers):
|
|
"""User A creates a config; user B cannot see it in their list."""
|
|
# Admin creates a config
|
|
r = await client.post(
|
|
"/api/oci/config",
|
|
data={
|
|
"tenancy_name": "IsolationTest",
|
|
"tenancy_ocid": "ocid1.tenancy.oc1..isolation",
|
|
"user_ocid": "ocid1.user.oc1..isolation",
|
|
"fingerprint": "ee:ff:00:11",
|
|
"region": "eu-frankfurt-1",
|
|
"auth_type": "api_key",
|
|
},
|
|
files={"private_key": ("key.pem", io.BytesIO(_DUMMY_PEM), "application/x-pem-file")},
|
|
headers=admin_headers,
|
|
)
|
|
assert r.status_code == 200
|
|
admin_cid = r.json()["id"]
|
|
|
|
# Regular user lists configs — should NOT see admin's config
|
|
r2 = await client.get("/api/oci/configs", headers=user_headers)
|
|
assert r2.status_code == 200
|
|
user_ids = [c["id"] for c in r2.json()]
|
|
assert admin_cid not in user_ids
|
|
|
|
# Cleanup
|
|
await client.delete(f"/api/oci/configs/{admin_cid}", headers=admin_headers)
|