101 lines
2.5 KiB
Ruby
101 lines
2.5 KiB
Ruby
require "test_helper"
|
|
|
|
class DopplerAdapterTest < SecretAdapterTestCase
|
|
setup do
|
|
`true` # Ensure $? is 0
|
|
end
|
|
|
|
test "fetch" do
|
|
stub_ticks.with("doppler me --json 2> /dev/null")
|
|
|
|
stub_ticks
|
|
.with("doppler secrets get SECRET1 FSECRET1 FSECRET2 --json -p my-project -c prd")
|
|
.returns(<<~JSON)
|
|
{
|
|
"SECRET1": {
|
|
"computed":"secret1",
|
|
"computedVisibility":"unmasked",
|
|
"note":""
|
|
},
|
|
"FSECRET1": {
|
|
"computed":"fsecret1",
|
|
"computedVisibility":"unmasked",
|
|
"note":""
|
|
},
|
|
"FSECRET2": {
|
|
"computed":"fsecret2",
|
|
"computedVisibility":"unmasked",
|
|
"note":""
|
|
}
|
|
}
|
|
JSON
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "SECRET1", "FSECRET1", "FSECRET2")))
|
|
|
|
expected_json = {
|
|
"SECRET1"=>"secret1",
|
|
"FSECRET1"=>"fsecret1",
|
|
"FSECRET2"=>"fsecret2"
|
|
}
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
test "fetch with from" do
|
|
stub_ticks.with("doppler me --json 2> /dev/null")
|
|
|
|
error = assert_raises RuntimeError do
|
|
run_command("fetch", "--from", "FOLDER1", "FSECRET1", "FSECRET2")
|
|
end
|
|
|
|
assert_match(/Using --from option or FOLDER\/SECRET is not supported by Doppler/, error.message)
|
|
end
|
|
|
|
test "fetch with folder in secret" do
|
|
stub_ticks.with("doppler me --json 2> /dev/null")
|
|
|
|
error = assert_raises RuntimeError do
|
|
run_command("fetch", "FOLDER1/FSECRET1", "SECRET2")
|
|
end
|
|
|
|
assert_match(/Using --from option or FOLDER\/SECRET is not supported by Doppler/, error.message)
|
|
end
|
|
|
|
test "fetch with signin" do
|
|
stub_ticks_with("doppler me --json 2> /dev/null", succeed: false)
|
|
stub_ticks_with("doppler login -y", succeed: true).returns("")
|
|
stub_ticks.with("doppler secrets get SECRET1 --json -p my-project -c prd").returns(single_item_json)
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "SECRET1")))
|
|
|
|
expected_json = {
|
|
"SECRET1"=>"secret1"
|
|
}
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
private
|
|
def run_command(*command)
|
|
stdouted do
|
|
Kamal::Cli::Secrets.start \
|
|
[ *command,
|
|
"-c", "test/fixtures/deploy_with_accessories.yml",
|
|
"--adapter", "doppler",
|
|
"--account", "my-project/prd" ]
|
|
end
|
|
end
|
|
|
|
def single_item_json
|
|
<<~JSON
|
|
{
|
|
"SECRET1": {
|
|
"computed":"secret1",
|
|
"computedVisibility":"unmasked",
|
|
"note":""
|
|
}
|
|
}
|
|
JSON
|
|
end
|
|
end
|