mirror of
https://github.com/MengMengCode/CLICD.git
synced 2026-08-05 05:36:07 +08:00
MengMengCode
38debab1aa
- Implement tests for custom KVM and LXC image creation, ensuring invalid sources and architecture mismatches are rejected. - Introduce access policy management in CLI, allowing configuration of allowed sources and trusted proxies. - Add NAT network configuration with validation for RFC1918 compliance and subnet parsing. - Create panel access policy management, including normalization and evaluation of access decisions based on client IPs and forwarded headers. - Develop middleware for enforcing access policies in the server, returning appropriate responses for allowed and denied requests. - Enhance custom image downloading and validation, ensuring integrity and security of downloaded root filesystem archives. - Include comprehensive tests for all new functionalities to ensure reliability and correctness.
89 lines
1.9 KiB
Go
89 lines
1.9 KiB
Go
package config
|
|
|
|
import "testing"
|
|
|
|
func TestAllocateSSHPortUsesConfiguredNATRange(t *testing.T) {
|
|
AppConfig = &ClicdConfig{
|
|
NATPortStart: 30000,
|
|
NATPortEnd: 30002,
|
|
NextSSHPort: 22000,
|
|
Containers: []Container{{
|
|
PortMappings: []PortMapping{
|
|
{HostPort: 30000},
|
|
{HostPort: 30001},
|
|
},
|
|
}},
|
|
}
|
|
|
|
port, err := AllocateSSHPort()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if port != 30002 {
|
|
t.Fatalf("expected port 30002, got %d", port)
|
|
}
|
|
if AppConfig.NextSSHPort != 30000 {
|
|
t.Fatalf("expected next port to wrap to 30000, got %d", AppConfig.NextSSHPort)
|
|
}
|
|
}
|
|
|
|
func TestAllocateSSHPortErrorsWhenConfiguredRangeIsFull(t *testing.T) {
|
|
AppConfig = &ClicdConfig{
|
|
NATPortStart: 31000,
|
|
NATPortEnd: 31001,
|
|
NextSSHPort: 31000,
|
|
Containers: []Container{{
|
|
PortMappings: []PortMapping{
|
|
{HostPort: 31000},
|
|
{HostPort: 31001},
|
|
},
|
|
}},
|
|
}
|
|
|
|
if port, err := AllocateSSHPort(); err == nil {
|
|
t.Fatalf("expected exhausted NAT range error, got port %d", port)
|
|
}
|
|
}
|
|
|
|
func TestAllocateSSHPortExcludingRequestedMappings(t *testing.T) {
|
|
previous := AppConfig
|
|
t.Cleanup(func() { AppConfig = previous })
|
|
AppConfig = &ClicdConfig{
|
|
NATPortStart: 32000,
|
|
NATPortEnd: 32002,
|
|
NextSSHPort: 32000,
|
|
}
|
|
|
|
port, err := AllocateSSHPortExcluding([]int{32000, 32001})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if port != 32002 {
|
|
t.Fatalf("allocated port = %d, want 32002", port)
|
|
}
|
|
}
|
|
|
|
func TestPreviewSSHPortUsesRangeWithoutAdvancingCursor(t *testing.T) {
|
|
previous := AppConfig
|
|
t.Cleanup(func() { AppConfig = previous })
|
|
AppConfig = &ClicdConfig{
|
|
NATPortStart: 30000,
|
|
NATPortEnd: 35000,
|
|
NextSSHPort: 30000,
|
|
Containers: []Container{{
|
|
PortMappings: []PortMapping{{HostPort: 30000}},
|
|
}},
|
|
}
|
|
|
|
port, err := PreviewSSHPortExcluding([]int{30001})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if port != 30002 {
|
|
t.Fatalf("preview port = %d, want 30002", port)
|
|
}
|
|
if AppConfig.NextSSHPort != 30000 {
|
|
t.Fatalf("preview advanced cursor to %d", AppConfig.NextSSHPort)
|
|
}
|
|
}
|