1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
//go:build acceptance || keymanager || acls
// +build acceptance keymanager acls
package v1
import (
"testing"
"github.com/gophercloud/gophercloud/acceptance/clients"
"github.com/gophercloud/gophercloud/acceptance/tools"
"github.com/gophercloud/gophercloud/openstack/keymanager/v1/acls"
th "github.com/gophercloud/gophercloud/testhelper"
)
func TestACLCRUD(t *testing.T) {
client, err := clients.NewKeyManagerV1Client()
th.AssertNoErr(t, err)
payload := tools.RandomString("SUPERSECRET-", 8)
secret, err := CreateSecretWithPayload(t, client, payload)
th.AssertNoErr(t, err)
secretID, err := ParseID(secret.SecretRef)
th.AssertNoErr(t, err)
defer DeleteSecret(t, client, secretID)
user := tools.RandomString("", 32)
users := []string{user}
iFalse := false
setOpts := acls.SetOpts{
acls.SetOpt{
Type: "read",
Users: &users,
ProjectAccess: &iFalse,
},
}
aclRef, err := acls.SetSecretACL(client, secretID, setOpts).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, aclRef)
defer func() {
err := acls.DeleteSecretACL(client, secretID).ExtractErr()
th.AssertNoErr(t, err)
acl, err := acls.GetSecretACL(client, secretID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
}()
acl, err := acls.GetSecretACL(client, secretID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
tools.PrintResource(t, (*acl)["read"].Created)
th.AssertEquals(t, len((*acl)["read"].Users), 1)
th.AssertEquals(t, (*acl)["read"].ProjectAccess, false)
newUsers := []string{}
updateOpts := acls.SetOpts{
acls.SetOpt{
Type: "read",
Users: &newUsers,
},
}
aclRef, err = acls.UpdateSecretACL(client, secretID, updateOpts).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, aclRef)
acl, err = acls.GetSecretACL(client, secretID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
tools.PrintResource(t, (*acl)["read"].Created)
th.AssertEquals(t, len((*acl)["read"].Users), 0)
th.AssertEquals(t, (*acl)["read"].ProjectAccess, false)
container, err := CreateGenericContainer(t, client, secret)
th.AssertNoErr(t, err)
containerID, err := ParseID(container.ContainerRef)
th.AssertNoErr(t, err)
defer DeleteContainer(t, client, containerID)
aclRef, err = acls.SetContainerACL(client, containerID, setOpts).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, aclRef)
defer func() {
err := acls.DeleteContainerACL(client, containerID).ExtractErr()
th.AssertNoErr(t, err)
acl, err := acls.GetContainerACL(client, containerID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
}()
acl, err = acls.GetContainerACL(client, containerID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
tools.PrintResource(t, (*acl)["read"].Created)
th.AssertEquals(t, len((*acl)["read"].Users), 1)
th.AssertEquals(t, (*acl)["read"].ProjectAccess, false)
aclRef, err = acls.UpdateContainerACL(client, containerID, updateOpts).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, aclRef)
acl, err = acls.GetContainerACL(client, containerID).Extract()
th.AssertNoErr(t, err)
tools.PrintResource(t, acl)
tools.PrintResource(t, (*acl)["read"].Created)
th.AssertEquals(t, len((*acl)["read"].Users), 0)
th.AssertEquals(t, (*acl)["read"].ProjectAccess, false)
}
|
