mirror of https://github.com/databricks/cli.git
92 lines
2.6 KiB
Go
92 lines
2.6 KiB
Go
package internal
|
|
|
|
import (
|
|
"context"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/databricks/cli/internal/acc"
|
|
"github.com/databricks/databricks-sdk-go/service/workspace"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestSecretsCreateScopeErrWhenNoArguments(t *testing.T) {
|
|
_, _, err := RequireErrorRun(t, "secrets", "create-scope")
|
|
assert.Equal(t, "accepts 1 arg(s), received 0", err.Error())
|
|
}
|
|
|
|
func temporarySecretScope(ctx context.Context, t *acc.WorkspaceT) string {
|
|
scope := acc.RandomName("cli-acc-")
|
|
err := t.W.Secrets.CreateScope(ctx, workspace.CreateScope{
|
|
Scope: scope,
|
|
})
|
|
require.NoError(t, err)
|
|
|
|
// Delete the scope after the test.
|
|
t.Cleanup(func() {
|
|
err := t.W.Secrets.DeleteScopeByScope(ctx, scope)
|
|
require.NoError(t, err)
|
|
})
|
|
|
|
return scope
|
|
}
|
|
|
|
func assertSecretStringValue(t *acc.WorkspaceT, scope, key, expected string) {
|
|
out, err := t.RunPython(fmt.Sprintf(`
|
|
import base64
|
|
value = dbutils.secrets.get(scope="%s", key="%s")
|
|
encoded_value = base64.b64encode(value.encode('utf-8'))
|
|
print(encoded_value.decode('utf-8'))
|
|
`, scope, key))
|
|
require.NoError(t, err)
|
|
|
|
decoded, err := base64.StdEncoding.DecodeString(out)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, expected, string(decoded))
|
|
}
|
|
|
|
func assertSecretBytesValue(t *acc.WorkspaceT, scope, key string, expected []byte) {
|
|
out, err := t.RunPython(fmt.Sprintf(`
|
|
import base64
|
|
value = dbutils.secrets.getBytes(scope="%s", key="%s")
|
|
encoded_value = base64.b64encode(value)
|
|
print(encoded_value.decode('utf-8'))
|
|
`, scope, key))
|
|
require.NoError(t, err)
|
|
|
|
decoded, err := base64.StdEncoding.DecodeString(out)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, expected, decoded)
|
|
}
|
|
|
|
func TestSecretsPutSecretStringValue(tt *testing.T) {
|
|
ctx, t := acc.WorkspaceTest(tt)
|
|
scope := temporarySecretScope(ctx, t)
|
|
key := "test-key"
|
|
value := "test-value\nwith-newlines\n"
|
|
|
|
stdout, stderr := RequireSuccessfulRun(t.T, "secrets", "put-secret", scope, key, "--string-value", value)
|
|
assert.Empty(t, stdout)
|
|
assert.Empty(t, stderr)
|
|
|
|
assertSecretStringValue(t, scope, key, value)
|
|
assertSecretBytesValue(t, scope, key, []byte(value))
|
|
}
|
|
|
|
func TestSecretsPutSecretBytesValue(tt *testing.T) {
|
|
ctx, t := acc.WorkspaceTest(tt)
|
|
scope := temporarySecretScope(ctx, t)
|
|
key := "test-key"
|
|
value := []byte{0x00, 0x01, 0x02, 0x03}
|
|
|
|
stdout, stderr := RequireSuccessfulRun(t.T, "secrets", "put-secret", scope, key, "--bytes-value", string(value))
|
|
assert.Empty(t, stdout)
|
|
assert.Empty(t, stderr)
|
|
|
|
// Note: this value cannot be represented as Python string,
|
|
// so we only check equality through the dbutils.secrets.getBytes API.
|
|
assertSecretBytesValue(t, scope, key, value)
|
|
}
|