1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
from unittest import TestCase
from tests.utils.hvac_integration_test_case import HvacIntegrationTestCase
class TestMount(HvacIntegrationTestCase, TestCase):
TEST_KVV1_MOUNT_POINT = "kvv1_mount"
def setUp(self):
super().setUp()
self.client.sys.enable_secrets_engine(
backend_type="kv",
path=self.TEST_KVV1_MOUNT_POINT,
options=dict(version=1),
)
def tearDown(self):
self.client.sys.disable_secrets_engine(path=self.TEST_KVV1_MOUNT_POINT)
super().tearDown()
def test_secret_backend_manipulation(self):
self.assertNotIn(
member="test/",
container=self.client.sys.list_mounted_secrets_engines()["data"],
)
self.client.sys.enable_secrets_engine(
backend_type="generic",
path="test",
)
self.assertIn(
member="test/",
container=self.client.sys.list_mounted_secrets_engines()["data"],
)
secret_backend_tuning = self.client.sys.read_mount_configuration(path="test")
self.assertEqual(secret_backend_tuning["data"]["max_lease_ttl"], 2764800)
self.assertEqual(secret_backend_tuning["data"]["default_lease_ttl"], 2764800)
self.client.sys.tune_mount_configuration(
path="test",
default_lease_ttl="3600s",
max_lease_ttl="8600s",
)
secret_backend_tuning = self.client.sys.read_mount_configuration(path="test")
self.assertIn("max_lease_ttl", secret_backend_tuning["data"])
self.assertEqual(secret_backend_tuning["data"]["max_lease_ttl"], 8600)
self.assertIn("default_lease_ttl", secret_backend_tuning["data"])
self.assertEqual(secret_backend_tuning["data"]["default_lease_ttl"], 3600)
self.client.sys.move_backend(
from_path="test",
to_path="foobar",
)
self.assertNotIn(
member="test/",
container=self.client.sys.list_mounted_secrets_engines()["data"],
)
self.assertIn(
member="foobar/",
container=self.client.sys.list_mounted_secrets_engines()["data"],
)
self.client.token = self.manager.root_token
self.client.sys.disable_secrets_engine(path="foobar")
self.assertNotIn(
member="foobar/",
container=self.client.sys.list_mounted_secrets_engines()["data"],
)
def test_get_secret_backend_tuning(self):
secret_backend_tuning = self.client.sys.read_mount_configuration(
path=self.TEST_KVV1_MOUNT_POINT
)
self.assertIn(
member="default_lease_ttl",
container=secret_backend_tuning["data"],
)
|
