1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
# Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"). You
# may not use this file except in compliance with the License. A copy of
# the License is located at
#
# http://aws.amazon.com/apache2.0/
#
# or in the "license" file accompanying this file. This file is
# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
# ANY KIND, either express or implied. See the License for the specific
# language governing permissions and limitations under the License.
import os
import shutil
import tempfile
from urllib3.exceptions import LocationParseError
from botocore.exceptions import (
ConnectionClosedError,
HTTPClientError,
InvalidIMDSEndpointError,
)
from botocore.utils import FileWebIdentityTokenLoader, InstanceMetadataFetcher
from tests import mock, unittest
class TestFileWebIdentityTokenLoader(unittest.TestCase):
def setUp(self):
super().setUp()
self.tempdir = tempfile.mkdtemp()
self.token = 'totally.a.token'
self.token_file = os.path.join(self.tempdir, 'token.jwt')
self.write_token(self.token)
def tearDown(self):
shutil.rmtree(self.tempdir)
super().tearDown()
def write_token(self, token, path=None):
if path is None:
path = self.token_file
with open(path, 'w') as f:
f.write(token)
def test_can_load_token(self):
loader = FileWebIdentityTokenLoader(self.token_file)
token = loader()
self.assertEqual(self.token, token)
class TestInstanceMetadataFetcher(unittest.TestCase):
def test_catch_retryable_http_errors(self):
with mock.patch(
'botocore.httpsession.URLLib3Session.send'
) as send_mock:
fetcher = InstanceMetadataFetcher()
send_mock.side_effect = ConnectionClosedError(endpoint_url="foo")
creds = fetcher.retrieve_iam_role_credentials()
self.assertEqual(send_mock.call_count, 2)
for call_instance in send_mock.call_args_list:
self.assertTrue(
call_instance[0][0].url.startswith(fetcher.get_base_url())
)
self.assertEqual(creds, {})
def test_catch_invalid_imds_error(self):
with mock.patch(
'botocore.httpsession.URLLib3Session.send'
) as send_mock:
fetcher = InstanceMetadataFetcher()
e = LocationParseError(location="foo")
send_mock.side_effect = HTTPClientError(error=e)
with self.assertRaises(InvalidIMDSEndpointError):
fetcher.retrieve_iam_role_credentials()
|
