mirror of
https://github.com/hanzoai/compute.git
synced 2026-10-30 14:50:41 +00:00
zeekay
2b14fd1659
Cloud's side of this rename landed some time ago — the app is apps/compute, the env is COMPUTE_URL — and left a note saying the other half moves with the manifest that names it. This is the half that does not touch the cluster: the Go module is github.com/hanzoai/compute, the binary it builds is compute, and the image is ghcr.io/hanzoai/compute. GitHub already carries the new name. What is deliberately NOT here is the cutover. The Service universe declares is still visor, and so are visor-config, visor-kms-sync and visor-db-bucket. Pointing anything at compute.hanzo.svc before those move resolves to nothing, so they move together, in universe, not here.
40 lines
1.5 KiB
Go
40 lines
1.5 KiB
Go
// Copyright 2026 Hanzo Industries Inc. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package routers
|
|
|
|
import (
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/hanzoai/compute/authz"
|
|
)
|
|
|
|
// TestMain builds the authorizer the way the server does, because without it
|
|
// these tests were not measuring authorization at all.
|
|
//
|
|
// authz.Enforcer is a package variable and InitAuthz is called from exactly one
|
|
// place — pkg/visor/embed.go, the real bootstrap. A test that routes a request
|
|
// through ApiFilter without it reaches Enforcer.Enforce on a NIL enforcer, which
|
|
// panics, which Recover turns into a 500. A "this route is gated" assertion
|
|
// written as "not 200" then passes on the strength of a nil dereference, and
|
|
// would go on passing with the policy deleted.
|
|
//
|
|
// The policy is a static string and the enforcer is in memory — no store, no
|
|
// network — so building the real one costs nothing and makes a 403 mean 403.
|
|
func TestMain(m *testing.M) {
|
|
authz.InitAuthz()
|
|
os.Exit(m.Run())
|
|
}
|