mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-11-01 19:17:58 +00:00
Make -dev-four-cluster an ent-only option and remove ent-specific testhelpers (#7215)
This commit is contained in:
@@ -7,79 +7,22 @@ import (
|
||||
"fmt"
|
||||
"io/ioutil"
|
||||
"math/rand"
|
||||
"net/http"
|
||||
"net/url"
|
||||
"os"
|
||||
"reflect"
|
||||
"strings"
|
||||
"sync"
|
||||
"sync/atomic"
|
||||
"time"
|
||||
|
||||
"github.com/hashicorp/go-uuid"
|
||||
|
||||
"github.com/hashicorp/go-hclog"
|
||||
"github.com/hashicorp/vault/physical/raft"
|
||||
"github.com/hashicorp/vault/sdk/helper/logging"
|
||||
"github.com/hashicorp/vault/sdk/logical"
|
||||
"github.com/hashicorp/vault/vault/cluster"
|
||||
|
||||
log "github.com/hashicorp/go-hclog"
|
||||
raftlib "github.com/hashicorp/raft"
|
||||
"github.com/hashicorp/vault/api"
|
||||
credAppRole "github.com/hashicorp/vault/builtin/credential/approle"
|
||||
credUserpass "github.com/hashicorp/vault/builtin/credential/userpass"
|
||||
"github.com/hashicorp/vault/helper/namespace"
|
||||
"github.com/hashicorp/vault/helper/xor"
|
||||
"github.com/hashicorp/vault/sdk/helper/consts"
|
||||
"github.com/hashicorp/vault/physical/raft"
|
||||
"github.com/hashicorp/vault/sdk/physical"
|
||||
"github.com/hashicorp/vault/sdk/physical/inmem"
|
||||
"github.com/hashicorp/vault/vault"
|
||||
testing "github.com/mitchellh/go-testing-interface"
|
||||
"github.com/mitchellh/go-testing-interface"
|
||||
)
|
||||
|
||||
type ReplicatedTestClusters struct {
|
||||
PerfPrimaryCluster *vault.TestCluster
|
||||
PerfSecondaryCluster *vault.TestCluster
|
||||
PerfPrimaryDRCluster *vault.TestCluster
|
||||
PerfSecondaryDRCluster *vault.TestCluster
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) nonNilClusters() []*vault.TestCluster {
|
||||
all := []*vault.TestCluster{r.PerfPrimaryCluster, r.PerfSecondaryCluster,
|
||||
r.PerfPrimaryDRCluster, r.PerfSecondaryDRCluster}
|
||||
|
||||
var ret []*vault.TestCluster
|
||||
for _, cluster := range all {
|
||||
if cluster != nil {
|
||||
ret = append(ret, cluster)
|
||||
}
|
||||
}
|
||||
return ret
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) Cleanup() {
|
||||
for _, cluster := range r.nonNilClusters() {
|
||||
cluster.Cleanup()
|
||||
}
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) Primary() (*vault.TestCluster, *vault.TestClusterCore, *api.Client) {
|
||||
return r.PerfPrimaryCluster, r.PerfPrimaryCluster.Cores[0], r.PerfPrimaryCluster.Cores[0].Client
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) Secondary() (*vault.TestCluster, *vault.TestClusterCore, *api.Client) {
|
||||
return r.PerfSecondaryCluster, r.PerfSecondaryCluster.Cores[0], r.PerfSecondaryCluster.Cores[0].Client
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) PrimaryDR() (*vault.TestCluster, *vault.TestClusterCore, *api.Client) {
|
||||
return r.PerfPrimaryDRCluster, r.PerfPrimaryDRCluster.Cores[0], r.PerfPrimaryDRCluster.Cores[0].Client
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClusters) SecondaryDR() (*vault.TestCluster, *vault.TestClusterCore, *api.Client) {
|
||||
return r.PerfSecondaryDRCluster, r.PerfSecondaryDRCluster.Cores[0], r.PerfSecondaryDRCluster.Cores[0].Client
|
||||
}
|
||||
|
||||
// Generates a root token on the target cluster.
|
||||
func GenerateRoot(t testing.T, cluster *vault.TestCluster, drToken bool) string {
|
||||
token, err := GenerateRootWithError(t, cluster, drToken)
|
||||
@@ -205,349 +148,6 @@ func EnsureCoreUnsealed(t testing.T, c *vault.TestCluster, core *vault.TestClust
|
||||
}
|
||||
}
|
||||
|
||||
func EnsureCoreIsPerfStandby(t testing.T, client *api.Client) {
|
||||
t.Helper()
|
||||
logger := logging.NewVaultLogger(log.Info).Named(t.Name())
|
||||
start := time.Now()
|
||||
for {
|
||||
health, err := client.Sys().Health()
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if health.PerformanceStandby {
|
||||
break
|
||||
}
|
||||
|
||||
logger.Info("waiting for performance standby", "health", health)
|
||||
time.Sleep(time.Millisecond * 500)
|
||||
if time.Now().After(start.Add(time.Second * 60)) {
|
||||
t.Fatal("did not become a perf standby")
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func WaitForReplicationState(t testing.T, c *vault.Core, state consts.ReplicationState) {
|
||||
timeout := time.Now().Add(10 * time.Second)
|
||||
for {
|
||||
if time.Now().After(timeout) {
|
||||
t.Fatalf("timeout waiting for core to have state %d", uint32(state))
|
||||
}
|
||||
state := c.ReplicationState()
|
||||
if state.HasState(state) {
|
||||
break
|
||||
}
|
||||
time.Sleep(1 * time.Second)
|
||||
}
|
||||
}
|
||||
|
||||
type PassthroughWithLocalPaths struct {
|
||||
logical.Backend
|
||||
}
|
||||
|
||||
func (p *PassthroughWithLocalPaths) SpecialPaths() *logical.Paths {
|
||||
return &logical.Paths{
|
||||
LocalStorage: []string{
|
||||
"*",
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
func PassthroughWithLocalPathsFactory(ctx context.Context, c *logical.BackendConfig) (logical.Backend, error) {
|
||||
b, err := vault.PassthroughBackendFactory(ctx, c)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return &PassthroughWithLocalPaths{b}, nil
|
||||
}
|
||||
|
||||
func ConfClusterAndCore(t testing.T, conf *vault.CoreConfig, opts *vault.TestClusterOptions) (*vault.TestCluster, *vault.TestClusterCore) {
|
||||
if conf.Physical != nil || conf.HAPhysical != nil {
|
||||
t.Fatalf("conf.Physical and conf.HAPhysical cannot be specified")
|
||||
}
|
||||
if opts.Logger == nil {
|
||||
t.Fatalf("opts.Logger must be specified")
|
||||
}
|
||||
|
||||
inm, err := inmem.NewTransactionalInmem(nil, opts.Logger)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
inmha, err := inmem.NewInmemHA(nil, opts.Logger)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
coreConfig := *conf
|
||||
coreConfig.Physical = inm
|
||||
coreConfig.HAPhysical = inmha.(physical.HABackend)
|
||||
coreConfig.CredentialBackends = map[string]logical.Factory{
|
||||
"approle": credAppRole.Factory,
|
||||
"userpass": credUserpass.Factory,
|
||||
}
|
||||
vault.AddNoopAudit(&coreConfig)
|
||||
cluster := vault.NewTestCluster(t, &coreConfig, opts)
|
||||
cluster.Start()
|
||||
|
||||
cores := cluster.Cores
|
||||
core := cores[0]
|
||||
|
||||
vault.TestWaitActive(t, core.Core)
|
||||
|
||||
return cluster, core
|
||||
}
|
||||
|
||||
func GetPerfReplicatedClusters(t testing.T, conf *vault.CoreConfig, opts *vault.TestClusterOptions) *ReplicatedTestClusters {
|
||||
ret := &ReplicatedTestClusters{}
|
||||
|
||||
var logger hclog.Logger
|
||||
if opts != nil {
|
||||
logger = opts.Logger
|
||||
}
|
||||
if logger == nil {
|
||||
logger = log.New(&log.LoggerOptions{
|
||||
Mutex: &sync.Mutex{},
|
||||
Level: log.Trace,
|
||||
})
|
||||
}
|
||||
|
||||
// Set this lower so that state populates quickly to standby nodes
|
||||
cluster.HeartbeatInterval = 2 * time.Second
|
||||
|
||||
numCores := opts.NumCores
|
||||
if numCores == 0 {
|
||||
numCores = vault.DefaultNumCores
|
||||
}
|
||||
|
||||
localopts := *opts
|
||||
localopts.Logger = logger.Named("perf-pri")
|
||||
ret.PerfPrimaryCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
localopts.Logger = logger.Named("perf-sec")
|
||||
localopts.FirstCoreNumber += numCores
|
||||
ret.PerfSecondaryCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
SetupTwoClusterPerfReplication(t, ret.PerfPrimaryCluster, ret.PerfSecondaryCluster)
|
||||
|
||||
return ret
|
||||
}
|
||||
|
||||
func GetFourReplicatedClusters(t testing.T, handlerFunc func(*vault.HandlerProperties) http.Handler) *ReplicatedTestClusters {
|
||||
return GetFourReplicatedClustersWithConf(t, &vault.CoreConfig{}, &vault.TestClusterOptions{
|
||||
HandlerFunc: handlerFunc,
|
||||
})
|
||||
}
|
||||
|
||||
func GetFourReplicatedClustersWithConf(t testing.T, conf *vault.CoreConfig, opts *vault.TestClusterOptions) *ReplicatedTestClusters {
|
||||
ret := &ReplicatedTestClusters{}
|
||||
|
||||
logger := log.New(&log.LoggerOptions{
|
||||
Mutex: &sync.Mutex{},
|
||||
Level: log.Trace,
|
||||
})
|
||||
// Set this lower so that state populates quickly to standby nodes
|
||||
cluster.HeartbeatInterval = 2 * time.Second
|
||||
|
||||
numCores := opts.NumCores
|
||||
if numCores == 0 {
|
||||
numCores = vault.DefaultNumCores
|
||||
}
|
||||
|
||||
localopts := *opts
|
||||
localopts.Logger = logger.Named("perf-pri")
|
||||
ret.PerfPrimaryCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
localopts.Logger = logger.Named("perf-sec")
|
||||
localopts.FirstCoreNumber += numCores
|
||||
ret.PerfSecondaryCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
localopts.Logger = logger.Named("perf-pri-dr")
|
||||
localopts.FirstCoreNumber += numCores
|
||||
ret.PerfPrimaryDRCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
localopts.Logger = logger.Named("perf-sec-dr")
|
||||
localopts.FirstCoreNumber += numCores
|
||||
ret.PerfSecondaryDRCluster, _ = ConfClusterAndCore(t, conf, &localopts)
|
||||
|
||||
builder := &ReplicatedTestClustersBuilder{clusters: ret}
|
||||
builder.setupFourClusterReplication(t)
|
||||
|
||||
// Wait until poison pills have been read
|
||||
time.Sleep(45 * time.Second)
|
||||
EnsureCoresUnsealed(t, ret.PerfPrimaryCluster)
|
||||
EnsureCoresUnsealed(t, ret.PerfSecondaryCluster)
|
||||
EnsureCoresUnsealed(t, ret.PerfPrimaryDRCluster)
|
||||
EnsureCoresUnsealed(t, ret.PerfSecondaryDRCluster)
|
||||
|
||||
return ret
|
||||
}
|
||||
|
||||
type ReplicatedTestClustersBuilder struct {
|
||||
clusters *ReplicatedTestClusters
|
||||
perfToken string
|
||||
drToken string
|
||||
perfSecondaryRootToken string
|
||||
perfSecondaryDRToken string
|
||||
}
|
||||
|
||||
func SetupTwoClusterPerfReplication(t testing.T, pri, sec *vault.TestCluster) {
|
||||
clusters := &ReplicatedTestClusters{
|
||||
PerfPrimaryCluster: pri,
|
||||
PerfSecondaryCluster: sec,
|
||||
}
|
||||
builder := &ReplicatedTestClustersBuilder{clusters: clusters}
|
||||
builder.setupTwoClusterReplication(t)
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) setupTwoClusterReplication(t testing.T) {
|
||||
t.Log("enabling perf primary")
|
||||
r.enablePerfPrimary(t)
|
||||
WaitForActiveNode(t, r.clusters.PerfPrimaryCluster)
|
||||
r.getPerformanceToken(t)
|
||||
t.Log("enabling perf secondary")
|
||||
r.enablePerformanceSecondary(t)
|
||||
}
|
||||
|
||||
func SetupFourClusterReplication(t testing.T, pri, sec, pridr, secdr *vault.TestCluster) {
|
||||
clusters := &ReplicatedTestClusters{
|
||||
PerfPrimaryCluster: pri,
|
||||
PerfSecondaryCluster: sec,
|
||||
PerfPrimaryDRCluster: pridr,
|
||||
PerfSecondaryDRCluster: secdr,
|
||||
}
|
||||
builder := &ReplicatedTestClustersBuilder{clusters: clusters}
|
||||
builder.setupFourClusterReplication(t)
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) setupFourClusterReplication(t testing.T) {
|
||||
t.Log("enabling perf primary")
|
||||
r.enablePerfPrimary(t)
|
||||
r.getPerformanceToken(t)
|
||||
|
||||
t.Log("enabling dr primary")
|
||||
enableDrPrimary(t, r.clusters.PerfPrimaryCluster)
|
||||
r.drToken = getDrToken(t, r.clusters.PerfPrimaryCluster, "primary-dr-secondary")
|
||||
WaitForActiveNode(t, r.clusters.PerfPrimaryCluster)
|
||||
time.Sleep(1 * time.Second)
|
||||
|
||||
t.Log("enabling perf secondary")
|
||||
r.enablePerformanceSecondary(t)
|
||||
enableDrPrimary(t, r.clusters.PerfSecondaryCluster)
|
||||
r.perfSecondaryDRToken = getDrToken(t, r.clusters.PerfSecondaryCluster, "secondary-dr-secondary")
|
||||
|
||||
t.Log("enabling dr secondary on primary dr cluster")
|
||||
r.enableDrSecondary(t, r.clusters.PerfPrimaryDRCluster, r.drToken, r.clusters.PerfPrimaryCluster.CACertPEMFile)
|
||||
r.clusters.PerfPrimaryDRCluster.Cores[0].Client.SetToken(r.clusters.PerfPrimaryCluster.Cores[0].Client.Token())
|
||||
WaitForActiveNode(t, r.clusters.PerfPrimaryDRCluster)
|
||||
time.Sleep(1 * time.Second)
|
||||
|
||||
t.Log("enabling dr secondary on secondary dr cluster")
|
||||
r.enableDrSecondary(t, r.clusters.PerfSecondaryDRCluster, r.perfSecondaryDRToken, r.clusters.PerfSecondaryCluster.CACertPEMFile)
|
||||
r.clusters.PerfSecondaryDRCluster.Cores[0].Client.SetToken(r.perfSecondaryRootToken)
|
||||
WaitForActiveNode(t, r.clusters.PerfSecondaryDRCluster)
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) enablePerfPrimary(t testing.T) {
|
||||
c := r.clusters.PerfPrimaryCluster.Cores[0]
|
||||
_, err := c.Client.Logical().Write("sys/replication/performance/primary/enable", nil)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
WaitForReplicationState(t, c.Core, consts.ReplicationPerformancePrimary)
|
||||
WaitForActiveNodeAndPerfStandbys(t, r.clusters.PerfPrimaryCluster)
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) getPerformanceToken(t testing.T) {
|
||||
client := r.clusters.PerfPrimaryCluster.Cores[0].Client
|
||||
req := map[string]interface{}{
|
||||
"id": r.clusters.PerfSecondaryCluster.ID,
|
||||
}
|
||||
secret, err := client.Logical().Write("sys/replication/performance/primary/secondary-token", req)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
r.perfToken = secret.WrapInfo.Token
|
||||
}
|
||||
|
||||
func enableDrPrimary(t testing.T, tc *vault.TestCluster) {
|
||||
c := tc.Cores[0]
|
||||
_, err := c.Client.Logical().Write("sys/replication/dr/primary/enable", nil)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
WaitForReplicationStatus(t, c.Client, true, func(secret map[string]interface{}) bool {
|
||||
return secret["mode"] != nil && secret["mode"] == "primary"
|
||||
})
|
||||
}
|
||||
|
||||
func getDrToken(t testing.T, tc *vault.TestCluster, id string) string {
|
||||
req := map[string]interface{}{
|
||||
"id": id,
|
||||
}
|
||||
secret, err := tc.Cores[0].Client.Logical().Write("sys/replication/dr/primary/secondary-token", req)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
return secret.WrapInfo.Token
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) enablePerformanceSecondary(t testing.T) {
|
||||
c := r.clusters.PerfSecondaryCluster.Cores[0]
|
||||
postData := map[string]interface{}{
|
||||
"token": r.perfToken,
|
||||
"ca_file": r.clusters.PerfPrimaryCluster.CACertPEMFile,
|
||||
}
|
||||
if r.clusters.PerfPrimaryCluster.ClientAuthRequired {
|
||||
p := r.clusters.PerfPrimaryCluster.Cores[0]
|
||||
postData["client_cert_pem"] = string(p.ServerCertPEM)
|
||||
postData["client_key_pem"] = string(p.ServerKeyPEM)
|
||||
}
|
||||
_, err := c.Client.Logical().Write("sys/replication/performance/secondary/enable", postData)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
WaitForReplicationState(t, c.Core, consts.ReplicationPerformanceSecondary)
|
||||
|
||||
r.clusters.PerfSecondaryCluster.BarrierKeys = r.clusters.PerfPrimaryCluster.BarrierKeys
|
||||
|
||||
// We want to make sure we unseal all the nodes so we first need to wait
|
||||
// until two of the nodes seal due to the poison pill being written
|
||||
WaitForNCoresSealed(t, r.clusters.PerfSecondaryCluster, 2)
|
||||
EnsureCoresUnsealed(t, r.clusters.PerfSecondaryCluster)
|
||||
WaitForActiveNode(t, r.clusters.PerfSecondaryCluster)
|
||||
|
||||
r.perfSecondaryRootToken = GenerateRoot(t, r.clusters.PerfSecondaryCluster, false)
|
||||
for _, core := range r.clusters.PerfSecondaryCluster.Cores {
|
||||
core.Client.SetToken(r.perfSecondaryRootToken)
|
||||
}
|
||||
|
||||
WaitForPerfReplicationWorking(t, r.clusters.PerfPrimaryCluster, r.clusters.PerfSecondaryCluster)
|
||||
}
|
||||
|
||||
func (r *ReplicatedTestClustersBuilder) enableDrSecondary(t testing.T, tc *vault.TestCluster, token, ca_file string) {
|
||||
_, err := tc.Cores[0].Client.Logical().Write("sys/replication/dr/secondary/enable", map[string]interface{}{
|
||||
"token": token,
|
||||
"ca_file": ca_file,
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
WaitForReplicationState(t, tc.Cores[0].Core, consts.ReplicationDRSecondary)
|
||||
tc.BarrierKeys = r.clusters.PerfPrimaryCluster.BarrierKeys
|
||||
|
||||
// We want to make sure we unseal all the nodes so we first need to wait
|
||||
// until two of the nodes seal due to the poison pill being written
|
||||
WaitForNCoresSealed(t, tc, len(tc.Cores)-1)
|
||||
EnsureCoresUnsealed(t, tc)
|
||||
WaitForReplicationStatus(t, tc.Cores[0].Client, true, func(secret map[string]interface{}) bool {
|
||||
return secret["mode"] != nil && secret["mode"] == "secondary"
|
||||
})
|
||||
}
|
||||
|
||||
func EnsureStableActiveNode(t testing.T, cluster *vault.TestCluster) {
|
||||
activeCore := DeriveActiveCore(t, cluster)
|
||||
|
||||
@@ -633,73 +233,6 @@ func WaitForNCoresSealed(t testing.T, cluster *vault.TestCluster, n int) {
|
||||
t.Fatalf("%d cores were not sealed", n)
|
||||
}
|
||||
|
||||
func WaitForActiveNodeAndPerfStandbys(t testing.T, cluster *vault.TestCluster) {
|
||||
t.Helper()
|
||||
mountPoint, err := uuid.GenerateUUID()
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
err = cluster.Cores[0].Client.Sys().Mount(mountPoint, &api.MountInput{
|
||||
Type: "kv",
|
||||
Local: false,
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatal("unable to mount KV engine")
|
||||
}
|
||||
path := mountPoint + "/foo"
|
||||
var standbys, actives int64
|
||||
var wg sync.WaitGroup
|
||||
deadline := time.Now().Add(30 * time.Second)
|
||||
for i, c := range cluster.Cores {
|
||||
wg.Add(1)
|
||||
go func(coreIdx int, client *api.Client) {
|
||||
defer wg.Done()
|
||||
val := 1
|
||||
for time.Now().Before(deadline) {
|
||||
if coreIdx == 0 {
|
||||
_, err = cluster.Cores[0].Client.Logical().Write(path, map[string]interface{}{
|
||||
"bar": val,
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatal("unable to write KV", "path", path)
|
||||
}
|
||||
}
|
||||
val++
|
||||
time.Sleep(250 * time.Millisecond)
|
||||
|
||||
if coreIdx > 0 || atomic.LoadInt64(&actives) == 0 {
|
||||
leader, err := client.Sys().Leader()
|
||||
if err != nil {
|
||||
if strings.Contains(err.Error(), "Vault is sealed") {
|
||||
continue
|
||||
}
|
||||
t.Fatal(err)
|
||||
}
|
||||
if leader.IsSelf {
|
||||
atomic.AddInt64(&actives, 1)
|
||||
}
|
||||
if leader.PerfStandby && leader.PerfStandbyLastRemoteWAL > 0 {
|
||||
atomic.AddInt64(&standbys, 1)
|
||||
return
|
||||
}
|
||||
}
|
||||
if coreIdx == 0 && int(atomic.LoadInt64(&standbys)) == len(cluster.Cores)-1 {
|
||||
return
|
||||
}
|
||||
}
|
||||
}(i, c.Client)
|
||||
}
|
||||
wg.Wait()
|
||||
if actives != 1 || int(standbys) != len(cluster.Cores)-1 {
|
||||
t.Fatalf("expected 1 active core and %d standbys, got %d active and %d standbys",
|
||||
len(cluster.Cores)-1, actives, standbys)
|
||||
}
|
||||
err = cluster.Cores[0].Client.Sys().Unmount(mountPoint)
|
||||
if err != nil {
|
||||
t.Fatal("unable to unmount KV engine on primary")
|
||||
}
|
||||
}
|
||||
|
||||
func WaitForActiveNode(t testing.T, cluster *vault.TestCluster) *vault.TestClusterCore {
|
||||
t.Helper()
|
||||
for i := 0; i < 30; i++ {
|
||||
@@ -716,90 +249,6 @@ func WaitForActiveNode(t testing.T, cluster *vault.TestCluster) *vault.TestClust
|
||||
return nil
|
||||
}
|
||||
|
||||
func WaitForMatchingMerkleRoots(t testing.T, endpoint string, primary, secondary *api.Client) {
|
||||
getRoot := func(mode string, cli *api.Client) string {
|
||||
status, err := cli.Logical().Read(endpoint + "status")
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if status == nil || status.Data == nil || status.Data["mode"] == nil {
|
||||
t.Fatal("got nil secret or data")
|
||||
}
|
||||
if status.Data["mode"].(string) != mode {
|
||||
t.Fatalf("expected mode=%s, got %s", mode, status.Data["mode"].(string))
|
||||
}
|
||||
return status.Data["merkle_root"].(string)
|
||||
}
|
||||
|
||||
t.Helper()
|
||||
for i := 0; i < 30; i++ {
|
||||
secRoot := getRoot("secondary", secondary)
|
||||
priRoot := getRoot("primary", primary)
|
||||
|
||||
if reflect.DeepEqual(priRoot, secRoot) {
|
||||
return
|
||||
}
|
||||
time.Sleep(time.Second)
|
||||
}
|
||||
|
||||
t.Fatalf("roots did not become equal")
|
||||
}
|
||||
|
||||
func WaitForMatchingMerkleRootsCore(t testing.T, pri, sec *vault.TestClusterCore, dr bool) {
|
||||
rootFunc := vault.PerformanceMerkleRoot
|
||||
if dr {
|
||||
rootFunc = vault.DRMerkleRoot
|
||||
}
|
||||
|
||||
t.Helper()
|
||||
for i := 0; i < 30; i++ {
|
||||
secRoot := rootFunc(pri.Core)
|
||||
priRoot := rootFunc(pri.Core)
|
||||
|
||||
if reflect.DeepEqual(priRoot, secRoot) {
|
||||
return
|
||||
}
|
||||
time.Sleep(time.Second)
|
||||
}
|
||||
|
||||
t.Fatalf("roots did not become equal")
|
||||
}
|
||||
|
||||
func WaitForReplicationStatus(t testing.T, client *api.Client, dr bool, accept func(map[string]interface{}) bool) {
|
||||
t.Helper()
|
||||
url := "sys/replication/performance/status"
|
||||
if dr {
|
||||
url = "sys/replication/dr/status"
|
||||
}
|
||||
|
||||
var err error
|
||||
var secret *api.Secret
|
||||
for i := 0; i < 30; i++ {
|
||||
secret, err = client.Logical().Read(url)
|
||||
if err == nil && secret != nil && secret.Data != nil {
|
||||
if accept(secret.Data) {
|
||||
return
|
||||
}
|
||||
}
|
||||
time.Sleep(500 * time.Millisecond)
|
||||
}
|
||||
t.Fatalf("unable to get acceptable replication status: error=%v secret=%#v", err, secret)
|
||||
}
|
||||
|
||||
func WaitForWAL(t testing.T, c *vault.TestClusterCore, wal uint64) {
|
||||
t.Helper()
|
||||
timeout := time.Now().Add(3 * time.Second)
|
||||
for {
|
||||
if time.Now().After(timeout) {
|
||||
t.Fatal("timeout waiting for WAL", "segment", wal, "lastrmtwal", vault.LastRemoteWAL(c.Core))
|
||||
}
|
||||
if vault.LastRemoteWAL(c.Core) >= wal {
|
||||
break
|
||||
}
|
||||
time.Sleep(1 * time.Second)
|
||||
}
|
||||
}
|
||||
|
||||
func RekeyCluster(t testing.T, cluster *vault.TestCluster) {
|
||||
client := cluster.Cores[0].Client
|
||||
|
||||
@@ -927,43 +376,3 @@ func RaftClusterJoinNodes(t testing.T, cluster *vault.TestCluster) {
|
||||
|
||||
WaitForNCoresUnsealed(t, cluster, 3)
|
||||
}
|
||||
|
||||
// WaitForPerfReplicationWorking mounts a KV non-locally, writes to it on pri, and waits for the value to be readable on sec.
|
||||
func WaitForPerfReplicationWorking(t testing.T, pri, sec *vault.TestCluster) {
|
||||
t.Helper()
|
||||
priClient, secClient := pri.Cores[0].Client, sec.Cores[0].Client
|
||||
mountPoint, err := uuid.GenerateUUID()
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
err = priClient.Sys().Mount(mountPoint, &api.MountInput{
|
||||
Type: "kv",
|
||||
Local: false,
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatal("unable to mount KV engine on primary")
|
||||
}
|
||||
|
||||
path := mountPoint + "/foo"
|
||||
_, err = priClient.Logical().Write(path, map[string]interface{}{
|
||||
"bar": 1,
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatal("unable to write KV on primary", "path", path)
|
||||
}
|
||||
|
||||
deadline := time.Now().Add(30 * time.Second)
|
||||
for time.Now().Before(deadline) {
|
||||
var secret *api.Secret
|
||||
secret, err = secClient.Logical().Read(path)
|
||||
if err == nil && secret != nil {
|
||||
err = priClient.Sys().Unmount(mountPoint)
|
||||
if err != nil {
|
||||
t.Fatal("unable to unmount KV engine on primary")
|
||||
}
|
||||
return
|
||||
}
|
||||
time.Sleep(100 * time.Millisecond)
|
||||
}
|
||||
t.Fatal("unable to read replicated KV on secondary", "path", path, "err", err)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user