mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
84ee9fa0ce
Every command is cd-*: cd, cd-server, cd-repo-server, cd-application-controller, cd-applicationset-controller, cd-cmp-server, cd-commit-server, cd-dex, cd-git-ask-pass, cd-k8s-auth, cd-notification. util/argo is util/cd; util/notification/argocd is util/notification/cd. Preserved deliberately: github.com/argoproj/argocd-example-apps is an EXTERNAL repo used as an e2e fixture, and notifications-engine + pkg/v2 are real dependencies. Renaming a URL we do not own would break the tests. Two bugs I made and caught, both from a careless sed: - s/argo/cd/g turned 'argocd' into 'cdcd' in two directory names - renaming the package declaration left every call site saying argo.X go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
109 lines
2.6 KiB
Go
109 lines
2.6 KiB
Go
package commands
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"crypto/x509/pkix"
|
|
"encoding/pem"
|
|
"fmt"
|
|
"math/big"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func generateTestCert(t *testing.T, cn string) string {
|
|
t.Helper()
|
|
|
|
priv, err := rsa.GenerateKey(rand.Reader, 2048)
|
|
require.NoError(t, err)
|
|
|
|
template := &x509.Certificate{
|
|
SerialNumber: big.NewInt(time.Now().UnixNano()),
|
|
Subject: pkix.Name{
|
|
CommonName: cn,
|
|
},
|
|
NotBefore: time.Now(),
|
|
NotAfter: time.Now().Add(time.Hour),
|
|
KeyUsage: x509.KeyUsageDigitalSignature,
|
|
}
|
|
|
|
der, err := x509.CreateCertificate(
|
|
rand.Reader,
|
|
template,
|
|
template,
|
|
&priv.PublicKey,
|
|
priv,
|
|
)
|
|
require.NoError(t, err)
|
|
|
|
var buf bytes.Buffer
|
|
require.NoError(t, pem.Encode(&buf, &pem.Block{
|
|
Type: "CERTIFICATE",
|
|
Bytes: der,
|
|
}))
|
|
|
|
return buf.String()
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_DuplicateCerts(t *testing.T) {
|
|
cert := generateTestCert(t, "repo.example.com")
|
|
|
|
pems := []string{cert, cert}
|
|
|
|
unique, err := deduplicatePEMCertificates(pems)
|
|
require.NoError(t, err)
|
|
require.Len(t, unique, 1)
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_SameSubjectDifferentCerts(t *testing.T) {
|
|
cert1 := generateTestCert(t, "repo.example.com")
|
|
cert2 := generateTestCert(t, "repo.example.com")
|
|
|
|
pems := []string{cert1, cert2}
|
|
|
|
unique, err := deduplicatePEMCertificates(pems)
|
|
require.NoError(t, err)
|
|
require.Len(t, unique, 2)
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_InvalidCert(t *testing.T) {
|
|
pems := []string{"not a cert"}
|
|
|
|
_, err := deduplicatePEMCertificates(pems)
|
|
require.Error(t, err)
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_EmptyInput(t *testing.T) {
|
|
unique, err := deduplicatePEMCertificates([]string{})
|
|
require.NoError(t, err)
|
|
require.Empty(t, unique)
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_LargeNumberOfCerts(t *testing.T) {
|
|
const numCerts = 100
|
|
pems := make([]string, numCerts)
|
|
for i := range numCerts {
|
|
pems[i] = generateTestCert(t, fmt.Sprintf("host%d.example.com", i))
|
|
}
|
|
unique, err := deduplicatePEMCertificates(pems)
|
|
require.NoError(t, err)
|
|
require.Len(t, unique, numCerts)
|
|
}
|
|
|
|
func TestDeduplicatePEMCertificates_MixedValidAndInvalid(t *testing.T) {
|
|
cert1 := generateTestCert(t, "valid1.example.com")
|
|
cert2 := generateTestCert(t, "valid2.example.com")
|
|
// invalid entry before the valid ones — deduplicatePEMCertificates stops at first error
|
|
pems := []string{"not a cert", cert1, cert2}
|
|
_, err := deduplicatePEMCertificates(pems)
|
|
require.Error(t, err)
|
|
// invalid entry after some valid ones — same behaviour
|
|
pems = []string{cert1, "not a cert", cert2}
|
|
_, err = deduplicatePEMCertificates(pems)
|
|
require.Error(t, err)
|
|
}
|