mirror of
https://github.com/hanzoai/o11y.git
synced 2026-10-30 14:56:15 +00:00
zeekay
46c6241c52
The server moved off /api/vN; the integration suite, handler tests, install.sh's health wait and the docs still called the old tree. Claude-Session: https://claude.ai/code/session_01TUxvfuta1Z44KVNYuAz71F
109 lines
4.1 KiB
Python
109 lines
4.1 KiB
Python
"""Fixtures and helpers for service account tests."""
|
|
|
|
from http import HTTPStatus
|
|
|
|
import requests
|
|
|
|
from fixtures import types
|
|
from fixtures.logger import setup_logger
|
|
from fixtures.role import ROLES_BASE, find_role_by_name # noqa: F401 — re-export for existing callers
|
|
|
|
logger = setup_logger(__name__)
|
|
|
|
SERVICE_ACCOUNT_BASE = "/v1/o11y/service_accounts"
|
|
|
|
|
|
def create_service_account(o11y: types.O11y, token: str, name: str, role: str = "o11y-viewer") -> str:
|
|
"""Create a service account, assign a role, and return its ID."""
|
|
resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
json={"name": name},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.CREATED, resp.text
|
|
service_account_id = resp.json()["data"]["id"]
|
|
|
|
role_id = find_role_by_name(o11y, token, role)
|
|
role_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/roles"),
|
|
json={"id": role_id},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert role_resp.status_code == HTTPStatus.NO_CONTENT, role_resp.text
|
|
|
|
return service_account_id
|
|
|
|
|
|
def create_service_account_with_key(o11y: types.O11y, token: str, name: str, role: str = "o11y-admin") -> tuple:
|
|
"""Create a service account with an API key and return (service_account_id, api_key)."""
|
|
service_account_id = create_service_account(o11y, token, name, role)
|
|
|
|
key_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/keys"),
|
|
json={"name": "auth-key", "expiresAt": 0},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert key_resp.status_code == HTTPStatus.CREATED, key_resp.text
|
|
api_key = key_resp.json()["data"]["key"]
|
|
|
|
return service_account_id, api_key
|
|
|
|
|
|
def delete_service_account(o11y: types.O11y, token: str, service_account_id: str) -> None:
|
|
"""Soft-delete a service account."""
|
|
resp = requests.delete(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}"),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.NO_CONTENT, resp.text
|
|
|
|
|
|
def get_first_key_id(o11y: types.O11y, token: str, service_account_id: str) -> str:
|
|
"""Return the ID of the first API key for a service account."""
|
|
resp = requests.get(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/keys"),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.OK, resp.text
|
|
return resp.json()["data"][0]["id"]
|
|
|
|
|
|
def create_service_account_with_roles(o11y: types.O11y, token: str, name: str, roles: list[str]) -> str:
|
|
"""Create a service account and assign multiple roles."""
|
|
resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
json={"name": name},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.CREATED, resp.text
|
|
service_account_id = resp.json()["data"]["id"]
|
|
|
|
for role in roles:
|
|
role_id = find_role_by_name(o11y, token, role)
|
|
role_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/roles"),
|
|
json={"id": role_id},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert role_resp.status_code == HTTPStatus.NO_CONTENT, role_resp.text
|
|
|
|
return service_account_id
|
|
|
|
|
|
def find_service_account_by_name(o11y: types.O11y, token: str, name: str) -> dict:
|
|
"""Find a service account by name from the list endpoint."""
|
|
list_resp = requests.get(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert list_resp.status_code == HTTPStatus.OK, list_resp.text
|
|
return next(service_account for service_account in list_resp.json()["data"] if service_account["name"] == name)
|