pyrox.dev
1import ./make-test-python.nix ({ pkgs, ...} : {
2 name = "influxdb2";
3 meta = with pkgs.lib.maintainers; {
4 maintainers = [ offline ];
5 };
6
7 nodes.machine = { lib, ... }: {
8 environment.systemPackages = [ pkgs.influxdb2-cli ];
9 # Make sure that the service is restarted immediately if tokens need to be rewritten
10 # without relying on any Restart=on-failure behavior
11 systemd.services.influxdb2.serviceConfig.RestartSec = 6000;
12 services.influxdb2.enable = true;
13 services.influxdb2.provision = {
14 enable = true;
15 initialSetup = {
16 organization = "default";
17 bucket = "default";
18 passwordFile = pkgs.writeText "admin-pw" "ExAmPl3PA55W0rD";
19 tokenFile = pkgs.writeText "admin-token" "verysecureadmintoken";
20 };
21 organizations.someorg = {
22 buckets.somebucket = {};
23 auths.sometoken = {
24 description = "some auth token";
25 readBuckets = ["somebucket"];
26 writeBuckets = ["somebucket"];
27 };
28 };
29 users.someuser.passwordFile = pkgs.writeText "tmp-pw" "abcgoiuhaoga";
30 };
31
32 specialisation.withModifications.configuration = { ... }: {
33 services.influxdb2.provision = {
34 organizations.someorg.buckets.somebucket.present = false;
35 organizations.someorg.auths.sometoken.present = false;
36 users.someuser.present = false;
37
38 organizations.myorg = {
39 description = "Myorg description";
40 buckets.mybucket = {
41 description = "Mybucket description";
42 };
43 auths.mytoken = {
44 operator = true;
45 description = "operator token";
46 tokenFile = pkgs.writeText "tmp-tok" "someusertoken";
47 };
48 };
49 users.myuser.passwordFile = pkgs.writeText "tmp-pw" "abcgoiuhaoga";
50 };
51 };
52
53 specialisation.withParentDelete.configuration = { ... }: {
54 services.influxdb2.provision = {
55 organizations.someorg.present = false;
56 # Deleting the parent implies:
57 #organizations.someorg.buckets.somebucket.present = false;
58 #organizations.someorg.auths.sometoken.present = false;
59 };
60 };
61
62 specialisation.withNewTokens.configuration = { ... }: {
63 services.influxdb2.provision = {
64 organizations.default = {
65 auths.operator = {
66 operator = true;
67 description = "new optoken";
68 tokenFile = pkgs.writeText "tmp-tok" "newoptoken";
69 };
70 auths.allaccess = {
71 operator = true;
72 description = "new allaccess";
73 tokenFile = pkgs.writeText "tmp-tok" "newallaccess";
74 };
75 auths.specifics = {
76 description = "new specifics";
77 readPermissions = ["users" "tasks"];
78 writePermissions = ["tasks"];
79 tokenFile = pkgs.writeText "tmp-tok" "newspecificstoken";
80 };
81 };
82 };
83 };
84 };
85
86 testScript = { nodes, ... }:
87 let
88 specialisations = "${nodes.machine.system.build.toplevel}/specialisation";
89 tokenArg = "--token verysecureadmintoken";
90 in ''
91 def assert_contains(haystack, needle):
92 if needle not in haystack:
93 print("The haystack that will cause the following exception is:")
94 print("---")
95 print(haystack)
96 print("---")
97 raise Exception(f"Expected string '{needle}' was not found")
98
99 def assert_lacks(haystack, needle):
100 if needle in haystack:
101 print("The haystack that will cause the following exception is:")
102 print("---")
103 print(haystack, end="")
104 print("---")
105 raise Exception(f"Unexpected string '{needle}' was found")
106
107 machine.wait_for_unit("influxdb2.service")
108
109 machine.fail("curl --fail -X POST 'http://localhost:8086/api/v2/signin' -u admin:wrongpassword")
110 machine.succeed("curl --fail -X POST 'http://localhost:8086/api/v2/signin' -u admin:ExAmPl3PA55W0rD")
111
112 out = machine.succeed("influx org list ${tokenArg}")
113 assert_contains(out, "default")
114 assert_lacks(out, "myorg")
115 assert_contains(out, "someorg")
116
117 out = machine.succeed("influx bucket list ${tokenArg} --org default")
118 assert_contains(out, "default")
119
120 machine.fail("influx bucket list ${tokenArg} --org myorg")
121
122 out = machine.succeed("influx bucket list ${tokenArg} --org someorg")
123 assert_contains(out, "somebucket")
124
125 out = machine.succeed("influx user list ${tokenArg}")
126 assert_contains(out, "admin")
127 assert_lacks(out, "myuser")
128 assert_contains(out, "someuser")
129
130 out = machine.succeed("influx auth list ${tokenArg}")
131 assert_lacks(out, "operator token")
132 assert_contains(out, "some auth token")
133
134 with subtest("withModifications"):
135 machine.succeed('${specialisations}/withModifications/bin/switch-to-configuration test')
136 machine.wait_for_unit("influxdb2.service")
137
138 out = machine.succeed("influx org list ${tokenArg}")
139 assert_contains(out, "default")
140 assert_contains(out, "myorg")
141 assert_contains(out, "someorg")
142
143 out = machine.succeed("influx bucket list ${tokenArg} --org myorg")
144 assert_contains(out, "mybucket")
145
146 out = machine.succeed("influx bucket list ${tokenArg} --org someorg")
147 assert_lacks(out, "somebucket")
148
149 out = machine.succeed("influx user list ${tokenArg}")
150 assert_contains(out, "admin")
151 assert_contains(out, "myuser")
152 assert_lacks(out, "someuser")
153
154 out = machine.succeed("influx auth list ${tokenArg}")
155 assert_contains(out, "operator token")
156 assert_lacks(out, "some auth token")
157
158 # Make sure the user token is also usable
159 machine.succeed("influx auth list --token someusertoken")
160
161 with subtest("keepsUnrelated"):
162 machine.succeed('${nodes.machine.system.build.toplevel}/bin/switch-to-configuration test')
163 machine.wait_for_unit("influxdb2.service")
164
165 out = machine.succeed("influx org list ${tokenArg}")
166 assert_contains(out, "default")
167 assert_contains(out, "myorg")
168 assert_contains(out, "someorg")
169
170 out = machine.succeed("influx bucket list ${tokenArg} --org default")
171 assert_contains(out, "default")
172
173 out = machine.succeed("influx bucket list ${tokenArg} --org myorg")
174 assert_contains(out, "mybucket")
175
176 out = machine.succeed("influx bucket list ${tokenArg} --org someorg")
177 assert_contains(out, "somebucket")
178
179 out = machine.succeed("influx user list ${tokenArg}")
180 assert_contains(out, "admin")
181 assert_contains(out, "myuser")
182 assert_contains(out, "someuser")
183
184 out = machine.succeed("influx auth list ${tokenArg}")
185 assert_contains(out, "operator token")
186 assert_contains(out, "some auth token")
187
188 with subtest("withParentDelete"):
189 machine.succeed('${specialisations}/withParentDelete/bin/switch-to-configuration test')
190 machine.wait_for_unit("influxdb2.service")
191
192 out = machine.succeed("influx org list ${tokenArg}")
193 assert_contains(out, "default")
194 assert_contains(out, "myorg")
195 assert_lacks(out, "someorg")
196
197 out = machine.succeed("influx bucket list ${tokenArg} --org default")
198 assert_contains(out, "default")
199
200 out = machine.succeed("influx bucket list ${tokenArg} --org myorg")
201 assert_contains(out, "mybucket")
202
203 machine.fail("influx bucket list ${tokenArg} --org someorg")
204
205 out = machine.succeed("influx user list ${tokenArg}")
206 assert_contains(out, "admin")
207 assert_contains(out, "myuser")
208 assert_contains(out, "someuser")
209
210 out = machine.succeed("influx auth list ${tokenArg}")
211 assert_contains(out, "operator token")
212 assert_lacks(out, "some auth token")
213
214 with subtest("withNewTokens"):
215 machine.succeed('${specialisations}/withNewTokens/bin/switch-to-configuration test')
216 machine.wait_for_unit("influxdb2.service")
217
218 out = machine.succeed("influx auth list ${tokenArg}")
219 assert_contains(out, "operator token")
220 assert_contains(out, "some auth token")
221 assert_contains(out, "new optoken")
222 assert_contains(out, "new allaccess")
223 assert_contains(out, "new specifics")
224 '';
225})