49afdbb09a
Secret and clear env variables have different lifecycles. The clear ones are part of the repo, so it makes sense to always deploy them with the rest of the repo. The secret ones are external so we can't be sure that they are up to date, therefore they require an explicit push via `envify` or `env push`. We'll keep the env file, but now it just contains secrets. The clear values are passed directly to `docker run`.
75 lines
1.7 KiB
Ruby
75 lines
1.7 KiB
Ruby
require "test_helper"
|
|
|
|
class ConfigurationEnvTest < ActiveSupport::TestCase
|
|
require "test_helper"
|
|
|
|
test "simple" do
|
|
assert_config \
|
|
config: { "foo" => "bar", "baz" => "haz" },
|
|
clear: { "foo" => "bar", "baz" => "haz" },
|
|
secrets: {}
|
|
end
|
|
|
|
test "clear" do
|
|
assert_config \
|
|
config: { "clear" => { "foo" => "bar", "baz" => "haz" } },
|
|
clear: { "foo" => "bar", "baz" => "haz" },
|
|
secrets: {}
|
|
end
|
|
|
|
test "secret" do
|
|
ENV["PASSWORD"] = "hello"
|
|
env = Kamal::Configuration::Env.from_config config: { "secret" => [ "PASSWORD" ] }
|
|
|
|
assert_config \
|
|
config: { "secret" => [ "PASSWORD" ] },
|
|
clear: {},
|
|
secrets: { "PASSWORD" => "hello" }
|
|
ensure
|
|
ENV.delete "PASSWORD"
|
|
end
|
|
|
|
test "missing secret" do
|
|
env = {
|
|
"secret" => [ "PASSWORD" ]
|
|
}
|
|
|
|
assert_raises(KeyError) { Kamal::Configuration::Env.from_config(config: { "secret" => [ "PASSWORD" ] }).secrets }
|
|
end
|
|
|
|
test "secret and clear" do
|
|
ENV["PASSWORD"] = "hello"
|
|
config = {
|
|
"secret" => [ "PASSWORD" ],
|
|
"clear" => {
|
|
"foo" => "bar",
|
|
"baz" => "haz"
|
|
}
|
|
}
|
|
|
|
assert_config \
|
|
config: config,
|
|
clear: { "foo" => "bar", "baz" => "haz" },
|
|
secrets: { "PASSWORD" => "hello" }
|
|
ensure
|
|
ENV.delete "PASSWORD"
|
|
end
|
|
|
|
test "stringIO conversion" do
|
|
env = {
|
|
"foo" => "bar",
|
|
"baz" => "haz"
|
|
}
|
|
|
|
assert_equal "foo=bar\nbaz=haz\n", \
|
|
StringIO.new(Kamal::EnvFile.new(env)).read
|
|
end
|
|
|
|
private
|
|
def assert_config(config:, clear:, secrets:)
|
|
env = Kamal::Configuration::Env.from_config config: config
|
|
assert_equal clear, env.clear
|
|
assert_equal secrets, env.secrets
|
|
end
|
|
end
|