104 lines
3.0 KiB
Python
104 lines
3.0 KiB
Python
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
|
|
NGINX_CONFIG = """server {
|
|
listen 80;
|
|
server_name mo.wooo.work;
|
|
return 301 https://$server_name$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name mo.wooo.work;
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:5003;
|
|
}
|
|
}
|
|
"""
|
|
|
|
NGINX_FRAGMENT = """location = /metrics {
|
|
allow 127.0.0.1;
|
|
allow 172.16.0.0/12;
|
|
deny all;
|
|
proxy_pass http://127.0.0.1:5003/metrics;
|
|
}
|
|
"""
|
|
|
|
PROMETHEUS_CONFIG = """global:
|
|
scrape_interval: 60s
|
|
|
|
scrape_configs:
|
|
- job_name: existing
|
|
static_configs:
|
|
- targets: ['127.0.0.1:9090']
|
|
"""
|
|
|
|
PROMETHEUS_SNIPPET = """ - job_name: 'ewoooc-app'
|
|
metrics_path: /metrics
|
|
static_configs:
|
|
- targets: ['mo.wooo.work']
|
|
"""
|
|
|
|
|
|
def test_render_nginx_config_targets_only_tls_server_and_is_idempotent():
|
|
from services.metrics_edge_controlled_apply_service import render_nginx_config
|
|
|
|
rendered = render_nginx_config(NGINX_CONFIG, NGINX_FRAGMENT)
|
|
second = render_nginx_config(rendered, NGINX_FRAGMENT)
|
|
|
|
assert rendered == second
|
|
assert rendered.count("location = /metrics") == 1
|
|
assert rendered.index("listen 443") < rendered.index("location = /metrics")
|
|
assert rendered.index("location = /metrics") < rendered.index("location / {")
|
|
|
|
|
|
def test_render_prometheus_config_is_idempotent():
|
|
from services.metrics_edge_controlled_apply_service import render_prometheus_config
|
|
|
|
rendered = render_prometheus_config(PROMETHEUS_CONFIG, PROMETHEUS_SNIPPET)
|
|
second = render_prometheus_config(rendered, PROMETHEUS_SNIPPET)
|
|
|
|
assert rendered == second
|
|
assert rendered.count("job_name: 'ewoooc-app'") == 1
|
|
|
|
|
|
def test_build_plan_is_no_write_and_commit_safe(tmp_path: Path):
|
|
from services.metrics_edge_controlled_apply_service import build_metrics_edge_plan
|
|
|
|
paths = {
|
|
"nginx_config": tmp_path / "nginx.conf",
|
|
"prometheus_config": tmp_path / "prometheus.yml",
|
|
"nginx_fragment": tmp_path / "location.conf",
|
|
"prometheus_snippet": tmp_path / "scrape.yml",
|
|
}
|
|
paths["nginx_config"].write_text(NGINX_CONFIG, encoding="utf-8")
|
|
paths["prometheus_config"].write_text(PROMETHEUS_CONFIG, encoding="utf-8")
|
|
paths["nginx_fragment"].write_text(NGINX_FRAGMENT, encoding="utf-8")
|
|
paths["prometheus_snippet"].write_text(PROMETHEUS_SNIPPET, encoding="utf-8")
|
|
|
|
plan = build_metrics_edge_plan(
|
|
**paths,
|
|
run_id="sec-p0-001-test",
|
|
work_item_id="SEC-P0-001",
|
|
)
|
|
|
|
assert plan["mode"] == "check"
|
|
assert plan["nginx"]["changed"] is True
|
|
assert plan["prometheus"]["changed"] is True
|
|
assert paths["nginx_config"].read_text(encoding="utf-8") == NGINX_CONFIG
|
|
|
|
|
|
def test_render_rejects_incomplete_templates():
|
|
from services.metrics_edge_controlled_apply_service import (
|
|
render_nginx_config,
|
|
render_prometheus_config,
|
|
)
|
|
|
|
with pytest.raises(ValueError, match="incomplete"):
|
|
render_nginx_config(NGINX_CONFIG, "location = /metrics {}")
|
|
with pytest.raises(ValueError, match="incomplete"):
|
|
render_prometheus_config(PROMETHEUS_CONFIG, "job_name: other")
|