1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
# frozen_string_literal: true
# rubocop:todo all
require 'spec_helper'
describe 'Client-Side Encryption' do
describe 'Prose tests: Bypass mongocryptd spawn' do
require_libmongocrypt
require_enterprise
min_server_fcv '4.2'
include_context 'define shared FLE helpers'
# Choose a different port for mongocryptd than the one used by all the other
# tests to avoid failures caused by other tests spawning mongocryptd.
let(:mongocryptd_port) { 27091 }
context 'via mongocryptdBypassSpawn' do
let(:test_schema_map) do
BSON::ExtJSON.parse(File.read('spec/support/crypt/external/external-schema.json'))
end
let(:client) do
new_local_client(
SpecConfig.instance.addresses,
SpecConfig.instance.test_options.merge(
auto_encryption_options: {
kms_providers: local_kms_providers,
key_vault_namespace: 'keyvault.datakeys',
schema_map: { 'db.coll' => test_schema_map },
extra_options: {
mongocryptd_bypass_spawn: true,
mongocryptd_uri: "mongodb://localhost:#{mongocryptd_port}/db?serverSelectionTimeoutMS=1000",
mongocryptd_spawn_args: [ "--pidfilepath=bypass-spawning-mongocryptd.pid", "--port=#{mongocryptd_port}"],
},
},
database: 'db'
),
)
end
it 'does not spawn' do
lambda do
client['coll'].insert_one(encrypted: 'test')
end.should raise_error(Mongo::Error::NoServerAvailable, /Server address=localhost:#{Regexp.quote(mongocryptd_port.to_s)} UNKNOWN/)
end
end
context 'via bypassAutoEncryption' do
let(:client) do
new_local_client(
SpecConfig.instance.addresses,
SpecConfig.instance.test_options.merge(
auto_encryption_options: {
kms_providers: local_kms_providers,
key_vault_namespace: 'keyvault.datakeys',
bypass_auto_encryption: true,
extra_options: {
mongocryptd_spawn_args: [ "--pidfilepath=bypass-spawning-mongocryptd.pid", "--port=#{mongocryptd_port}"],
},
},
database: 'db'
),
)
end
let(:mongocryptd_client) do
new_local_client(["localhost:#{mongocryptd_port}"], server_selection_timeout: 1)
end
it 'does not spawn' do
lambda do
client['coll'].insert_one(encrypted: 'test')
end.should_not raise_error
lambda do
mongocryptd_client.database.command(hello: 1)
end.should raise_error(Mongo::Error::NoServerAvailable)
end
end
end
end
|
