package internal import ( "context" "encoding/base64" "fmt" "testing" "github.com/databricks/cli/internal/acc" "github.com/databricks/databricks-sdk-go/service/workspace" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) func TestSecretsCreateScopeErrWhenNoArguments(t *testing.T) { _, _, err := RequireErrorRun(t, "secrets", "create-scope") assert.Contains(t, err.Error(), "accepts 1 arg(s), received 0") } func temporarySecretScope(ctx context.Context, t *acc.WorkspaceT) string { scope := acc.RandomName("cli-acc-") err := t.W.Secrets.CreateScope(ctx, workspace.CreateScope{ Scope: scope, }) require.NoError(t, err) // Delete the scope after the test. t.Cleanup(func() { err := t.W.Secrets.DeleteScopeByScope(ctx, scope) require.NoError(t, err) }) return scope } func assertSecretStringValue(t *acc.WorkspaceT, scope, key, expected string) { out, err := t.RunPython(fmt.Sprintf(` import base64 value = dbutils.secrets.get(scope="%s", key="%s") encoded_value = base64.b64encode(value.encode('utf-8')) print(encoded_value.decode('utf-8')) `, scope, key)) require.NoError(t, err) decoded, err := base64.StdEncoding.DecodeString(out) require.NoError(t, err) assert.Equal(t, expected, string(decoded)) } func assertSecretBytesValue(t *acc.WorkspaceT, scope, key string, expected []byte) { out, err := t.RunPython(fmt.Sprintf(` import base64 value = dbutils.secrets.getBytes(scope="%s", key="%s") encoded_value = base64.b64encode(value) print(encoded_value.decode('utf-8')) `, scope, key)) require.NoError(t, err) decoded, err := base64.StdEncoding.DecodeString(out) require.NoError(t, err) assert.Equal(t, expected, decoded) } func TestAccSecretsPutSecretStringValue(tt *testing.T) { ctx, t := acc.WorkspaceTest(tt) scope := temporarySecretScope(ctx, t) key := "test-key" value := "test-value\nwith-newlines\n" stdout, stderr := RequireSuccessfulRun(t.T, "secrets", "put-secret", scope, key, "--string-value", value) assert.Empty(t, stdout) assert.Empty(t, stderr) assertSecretStringValue(t, scope, key, value) assertSecretBytesValue(t, scope, key, []byte(value)) } func TestAccSecretsPutSecretBytesValue(tt *testing.T) { ctx, t := acc.WorkspaceTest(tt) scope := temporarySecretScope(ctx, t) key := "test-key" value := []byte{0x00, 0x01, 0x02, 0x03} stdout, stderr := RequireSuccessfulRun(t.T, "secrets", "put-secret", scope, key, "--bytes-value", string(value)) assert.Empty(t, stdout) assert.Empty(t, stderr) // Note: this value cannot be represented as Python string, // so we only check equality through the dbutils.secrets.getBytes API. assertSecretBytesValue(t, scope, key, value) }