mirror of
https://github.com/MengMengCode/CLICD.git
synced 2026-08-04 21:31:23 +08:00
MengMengCode
38debab1aa
- Implement tests for custom KVM and LXC image creation, ensuring invalid sources and architecture mismatches are rejected. - Introduce access policy management in CLI, allowing configuration of allowed sources and trusted proxies. - Add NAT network configuration with validation for RFC1918 compliance and subnet parsing. - Create panel access policy management, including normalization and evaluation of access decisions based on client IPs and forwarded headers. - Develop middleware for enforcing access policies in the server, returning appropriate responses for allowed and denied requests. - Enhance custom image downloading and validation, ensuring integrity and security of downloaded root filesystem archives. - Include comprehensive tests for all new functionalities to ensure reliability and correctness.
84 lines
2.2 KiB
Go
84 lines
2.2 KiB
Go
package api
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"runtime"
|
|
"testing"
|
|
)
|
|
|
|
func TestCustomKVMImageCreateRejectsInvalidSource(t *testing.T) {
|
|
payload := map[string]string{
|
|
"name": "Invalid Source",
|
|
"distro": "ubuntu",
|
|
"release": "noble",
|
|
"arch": runtime.GOARCH,
|
|
"url": "file:///etc/passwd",
|
|
"provisioner": "linux-cloud-init",
|
|
}
|
|
body, err := json.Marshal(payload)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
request := httptest.NewRequest(http.MethodPost, "/api/images/custom", bytes.NewReader(body))
|
|
response := httptest.NewRecorder()
|
|
|
|
HandleCustomKVMImages(response, request)
|
|
|
|
if response.Code != http.StatusBadRequest {
|
|
t.Fatalf("status = %d, want %d; body=%s", response.Code, http.StatusBadRequest, response.Body.String())
|
|
}
|
|
}
|
|
|
|
func TestCustomKVMImageCreateRejectsArchitectureMismatch(t *testing.T) {
|
|
otherArch := "arm64"
|
|
if runtime.GOARCH == otherArch {
|
|
otherArch = "amd64"
|
|
}
|
|
payload := map[string]string{
|
|
"name": "Wrong Architecture",
|
|
"distro": "ubuntu",
|
|
"release": "noble",
|
|
"arch": otherArch,
|
|
"url": "https://example.test/image.qcow2",
|
|
"provisioner": "linux-cloud-init",
|
|
}
|
|
body, err := json.Marshal(payload)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
request := httptest.NewRequest(http.MethodPost, "/api/images/custom", bytes.NewReader(body))
|
|
response := httptest.NewRecorder()
|
|
|
|
HandleCustomKVMImages(response, request)
|
|
|
|
if response.Code != http.StatusBadRequest {
|
|
t.Fatalf("status = %d, want %d; body=%s", response.Code, http.StatusBadRequest, response.Body.String())
|
|
}
|
|
}
|
|
|
|
func TestCustomLXCImageCreateRejectsInvalidSource(t *testing.T) {
|
|
payload := map[string]string{
|
|
"type": "lxc",
|
|
"name": "Invalid LXC Source",
|
|
"distro": "alpine",
|
|
"release": "3.21",
|
|
"arch": runtime.GOARCH,
|
|
"url": "file:///tmp/rootfs.tar.xz",
|
|
}
|
|
body, err := json.Marshal(payload)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
request := httptest.NewRequest(http.MethodPost, "/api/images/custom", bytes.NewReader(body))
|
|
response := httptest.NewRecorder()
|
|
|
|
HandleCustomKVMImages(response, request)
|
|
|
|
if response.Code != http.StatusBadRequest {
|
|
t.Fatalf("status = %d, want %d; body=%s", response.Code, http.StatusBadRequest, response.Body.String())
|
|
}
|
|
}
|