mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-11-02 03:27:54 +00:00
17ffe62d0d
* VAULT-22481: Audit filter node (#24465) * Initial commit on adding filter nodes for audit * tests for audit filter * test: longer filter - more conditions * copywrite headers * Check interface for the right type * Add audit filtering feature (#24554) * Support filter nodes in backend factories and add some tests * More tests and cleanup * Attempt to move control of registration for nodes and pipelines to the audit broker (#24505) * invert control of the pipelines/nodes to the audit broker vs. within each backend * update noop audit test code to implement the pipeliner interface * noop mount path has trailing slash * attempting to make NoopAudit more friendly * NoopAudit uses known salt * Refactor audit.ProcessManual to support filter nodes * HasFiltering * rename the pipeliner * use exported AuditEvent in Filter * Add tests for registering and deregistering backends on the audit broker * Add missing licence header to one file, fix a typo in two tests --------- Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com> * Add changelog file * update bexpr datum to use a strong type * go docs updates * test path * PR review comments * handle scenarios/outcomes from broker.send * don't need to re-check the complete sinks * add extra check to deregister to ensure that re-registering non-filtered device sets sink threshold * Ensure that the multierror is appended before attempting to return it --------- Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
86 lines
2.1 KiB
Go
86 lines
2.1 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package event
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
// TestNewSocketSink ensures that we validate the input arguments and can create
|
|
// the SocketSink if everything goes to plan.
|
|
func TestNewSocketSink(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
tests := map[string]struct {
|
|
address string
|
|
format string
|
|
opts []Option
|
|
want *SocketSink
|
|
wantErr bool
|
|
expectedErrMsg string
|
|
}{
|
|
"address-empty": {
|
|
address: "",
|
|
wantErr: true,
|
|
expectedErrMsg: "event.NewSocketSink: address is required: invalid parameter",
|
|
},
|
|
"address-whitespace": {
|
|
address: " ",
|
|
wantErr: true,
|
|
expectedErrMsg: "event.NewSocketSink: address is required: invalid parameter",
|
|
},
|
|
"format-empty": {
|
|
address: "addr",
|
|
format: "",
|
|
wantErr: true,
|
|
expectedErrMsg: "event.NewSocketSink: format is required: invalid parameter",
|
|
},
|
|
"format-whitespace": {
|
|
address: "addr",
|
|
format: " ",
|
|
wantErr: true,
|
|
expectedErrMsg: "event.NewSocketSink: format is required: invalid parameter",
|
|
},
|
|
"bad-max-duration": {
|
|
address: "addr",
|
|
format: "json",
|
|
opts: []Option{WithMaxDuration("bar")},
|
|
wantErr: true,
|
|
expectedErrMsg: "event.NewSocketSink: error applying options: time: invalid duration \"bar\"",
|
|
},
|
|
"happy": {
|
|
address: "wss://foo",
|
|
format: "json",
|
|
want: &SocketSink{
|
|
requiredFormat: "json",
|
|
address: "wss://foo",
|
|
socketType: "tcp", // defaults to tcp
|
|
maxDuration: 2 * time.Second, // defaults to 2 secs
|
|
},
|
|
},
|
|
}
|
|
|
|
for name, tc := range tests {
|
|
name := name
|
|
tc := tc
|
|
t.Run(name, func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
got, err := NewSocketSink(tc.address, tc.format, tc.opts...)
|
|
|
|
if tc.wantErr {
|
|
require.Error(t, err)
|
|
require.EqualError(t, err, tc.expectedErrMsg)
|
|
require.Nil(t, got)
|
|
} else {
|
|
require.NoError(t, err)
|
|
require.Equal(t, tc.want, got)
|
|
}
|
|
})
|
|
}
|
|
}
|