feat(apisix): add Cloudron package
- Implements Apache APISIX packaging for Cloudron platform. - Includes Dockerfile, CloudronManifest.json, and start.sh. - Configured to use Cloudron's etcd addon. 🤖 Generated with Gemini CLI Co-Authored-By: Gemini <noreply@google.com>
This commit is contained in:
316
CloudronPackages/APISIX/apisix-source/t/secret/aws.t
Normal file
316
CloudronPackages/APISIX/apisix-source/t/secret/aws.t
Normal file
@@ -0,0 +1,316 @@
|
||||
#
|
||||
# Licensed to the Apache Software Foundation (ASF) under one or more
|
||||
# contributor license agreements. See the NOTICE file distributed with
|
||||
# this work for additional information regarding copyright ownership.
|
||||
# The ASF licenses this file to You under the Apache License, Version 2.0
|
||||
# (the "License"); you may not use this file except in compliance with
|
||||
# the License. You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
|
||||
BEGIN {
|
||||
$ENV{AWS_REGION} = "us-east-1";
|
||||
$ENV{AWS_ACCESS_KEY_ID} = "access";
|
||||
$ENV{AWS_SECRET_ACCESS_KEY} = "secret";
|
||||
$ENV{AWS_SESSION_TOKEN} = "token";
|
||||
}
|
||||
|
||||
use t::APISIX 'no_plan';
|
||||
|
||||
repeat_each(1);
|
||||
no_long_string();
|
||||
no_root_location();
|
||||
log_level("info");
|
||||
|
||||
run_tests;
|
||||
|
||||
__DATA__
|
||||
|
||||
=== TEST 1: sanity
|
||||
--- request
|
||||
GET /t
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local test_case = {
|
||||
{access_key_id = "access"},
|
||||
{secret_access_key = "secret"},
|
||||
{access_key_id = "access", secret_access_key = "secret"},
|
||||
{access_key_id = "access", secret_access_key = 1234},
|
||||
{access_key_id = 1234, secret_access_key = "secret"},
|
||||
{access_key_id = "access", secret_access_key = "secret", session_token = "token"},
|
||||
{access_key_id = "access", secret_access_key = "secret", session_token = 1234},
|
||||
{access_key_id = "access", secret_access_key = "secret", region = "us-east-1"},
|
||||
{access_key_id = "access", secret_access_key = "secret", region = 1234},
|
||||
{access_key_id = "access", secret_access_key = "secret", endpoint_url = "http://127.0.0.1:4566"},
|
||||
{access_key_id = "access", secret_access_key = "secret", endpoint_url = 1234},
|
||||
{access_key_id = "access", secret_access_key = "secret", session_token = "token", endpoint_url = "http://127.0.0.1:4566", region = "us-east-1"},
|
||||
}
|
||||
local aws = require("apisix.secret.aws")
|
||||
local core = require("apisix.core")
|
||||
local metadata_schema = aws.schema
|
||||
|
||||
for _, conf in ipairs(test_case) do
|
||||
local ok, err = core.schema.check(metadata_schema, conf)
|
||||
ngx.say(ok and "done" or err)
|
||||
end
|
||||
}
|
||||
}
|
||||
--- response_body
|
||||
property "secret_access_key" is required
|
||||
property "access_key_id" is required
|
||||
done
|
||||
property "secret_access_key" validation failed: wrong type: expected string, got number
|
||||
property "access_key_id" validation failed: wrong type: expected string, got number
|
||||
done
|
||||
property "session_token" validation failed: wrong type: expected string, got number
|
||||
done
|
||||
property "region" validation failed: wrong type: expected string, got number
|
||||
done
|
||||
property "endpoint_url" validation failed: wrong type: expected string, got number
|
||||
done
|
||||
|
||||
|
||||
|
||||
=== TEST 2: check key: no main key
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:4566",
|
||||
region = "us-east-1",
|
||||
access_key_id = "access",
|
||||
secret_access_key = "secret",
|
||||
session_token = "token",
|
||||
}
|
||||
local data, err = aws.get(conf, "/apisix")
|
||||
if err then
|
||||
return ngx.say(err)
|
||||
end
|
||||
|
||||
ngx.say("done")
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
can't find main key, key: /apisix
|
||||
|
||||
|
||||
|
||||
=== TEST 3: error aws endpoint_url
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:8080",
|
||||
region = "us-east-1",
|
||||
access_key_id = "access",
|
||||
secret_access_key = "secret",
|
||||
session_token = "token",
|
||||
}
|
||||
local data, err = aws.get(conf, "apisix-key/jack")
|
||||
if err then
|
||||
return ngx.say(err)
|
||||
end
|
||||
ngx.say("done")
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
failed to retrtive data from aws secret manager: SecretsManager:getSecretValue() failed to connect to 'http://127.0.0.1:8080': connection refused
|
||||
--- timeout: 6
|
||||
|
||||
|
||||
|
||||
=== TEST 4: get value from aws (status ~= 200)
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:4566",
|
||||
region = "us-east-1",
|
||||
access_key_id = "access",
|
||||
secret_access_key = "secret",
|
||||
session_token = "token",
|
||||
}
|
||||
local data, err = aws.get(conf, "apisix-error-key/jack")
|
||||
if err then
|
||||
return ngx.say("err")
|
||||
end
|
||||
ngx.say("value")
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
err
|
||||
|
||||
|
||||
|
||||
=== TEST 5: get json value from aws
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:4566",
|
||||
region = "us-east-1",
|
||||
access_key_id = "access",
|
||||
secret_access_key = "secret",
|
||||
session_token = "token",
|
||||
}
|
||||
local data, err = aws.get(conf, "apisix-key/jack")
|
||||
if err then
|
||||
return ngx.say(err)
|
||||
end
|
||||
ngx.say("value")
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
value
|
||||
|
||||
|
||||
|
||||
=== TEST 6: get json value from aws using env var
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:4566",
|
||||
region = "us-east-1",
|
||||
access_key_id = "$ENV://AWS_ACCESS_KEY_ID",
|
||||
secret_access_key = "$ENV://AWS_SECRET_ACCESS_KEY",
|
||||
session_token = "$ENV://AWS_SESSION_TOKEN",
|
||||
}
|
||||
local data, err = aws.get(conf, "apisix-key/jack")
|
||||
if err then
|
||||
return ngx.say(err)
|
||||
end
|
||||
ngx.say("value")
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
value
|
||||
|
||||
|
||||
|
||||
=== TEST 7: get string value from aws
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local aws = require("apisix.secret.aws")
|
||||
local conf = {
|
||||
endpoint_url = "http://127.0.0.1:4566",
|
||||
region = "us-east-1",
|
||||
access_key_id = "$ENV://AWS_ACCESS_KEY_ID",
|
||||
secret_access_key = "$ENV://AWS_SECRET_ACCESS_KEY",
|
||||
session_token = "$ENV://AWS_SESSION_TOKEN",
|
||||
}
|
||||
local data, err = aws.get(conf, "apisix-mysql")
|
||||
if err then
|
||||
return ngx.say(err)
|
||||
end
|
||||
ngx.say(data)
|
||||
}
|
||||
}
|
||||
--- request
|
||||
GET /t
|
||||
--- response_body
|
||||
secret
|
||||
|
||||
|
||||
|
||||
=== TEST 8: add secret && consumer && check
|
||||
--- request
|
||||
GET /t
|
||||
--- config
|
||||
location /t {
|
||||
content_by_lua_block {
|
||||
local t = require("lib.test_admin").test
|
||||
-- put secret aws config
|
||||
local code, body = t('/apisix/admin/secrets/aws/mysecret',
|
||||
ngx.HTTP_PUT,
|
||||
[[{
|
||||
"endpoint_url": "http://127.0.0.1:4566",
|
||||
"region": "us-east-1",
|
||||
"access_key_id": "access",
|
||||
"secret_access_key": "secret",
|
||||
"session_token": "token"
|
||||
}]]
|
||||
)
|
||||
if code >= 300 then
|
||||
ngx.status = code
|
||||
return ngx.say(body)
|
||||
end
|
||||
|
||||
-- change consumer with secrets ref: aws
|
||||
code, body = t('/apisix/admin/consumers',
|
||||
ngx.HTTP_PUT,
|
||||
[[{
|
||||
"username": "jack",
|
||||
"plugins": {
|
||||
"key-auth": {
|
||||
"key": "$secret://aws/mysecret/jack/key"
|
||||
}
|
||||
}
|
||||
}]]
|
||||
)
|
||||
if code >= 300 then
|
||||
ngx.status = code
|
||||
return ngx.say(body)
|
||||
end
|
||||
|
||||
|
||||
local secret = require("apisix.secret")
|
||||
local value = secret.fetch_by_uri("$secret://aws/mysecret/jack/key")
|
||||
|
||||
|
||||
local code, body = t('/apisix/admin/secrets/aws/mysecret', ngx.HTTP_DELETE)
|
||||
if code >= 300 then
|
||||
ngx.status = code
|
||||
return ngx.say(body)
|
||||
end
|
||||
|
||||
code, body = t('/apisix/admin/consumers',
|
||||
ngx.HTTP_PUT,
|
||||
[[{
|
||||
"username": "jack",
|
||||
"plugins": {
|
||||
"key-auth": {
|
||||
"key": "$secret://aws/mysecret/jack/key"
|
||||
}
|
||||
}
|
||||
}]]
|
||||
)
|
||||
if code >= 300 then
|
||||
ngx.status = code
|
||||
return ngx.say(body)
|
||||
end
|
||||
|
||||
local secret = require("apisix.secret")
|
||||
local value = secret.fetch_by_uri("$secret://aws/mysecret/jack/key")
|
||||
if value then
|
||||
ngx.say("secret value: ", value)
|
||||
end
|
||||
ngx.say("all done")
|
||||
}
|
||||
}
|
||||
--- response_body
|
||||
all done
|
||||
Reference in New Issue
Block a user