63bcddaa20
We are introducing a new subcommand for managing your clusters. Configuring your CLI to talk to your cluster is a single command now `dcos cluster setup`. Moreover, the CLI can now be aware of multiple clusters with cluster specific configuration managed by the CLI. Subcommands will be installed for the current "attached" cluster only. To install a subcommand for all your configured clusters, use `--global`. Note that `DCOS_CONFIG` environment variable will not take effect in "cluster" mode since we are now managing different clusters in the CLI.
110 lines
3.4 KiB
Python
110 lines
3.4 KiB
Python
import os
|
|
|
|
import pytest
|
|
|
|
from dcos import constants
|
|
|
|
from .helpers.common import exec_command, update_config
|
|
|
|
|
|
@pytest.fixture
|
|
def env():
|
|
r = os.environ.copy()
|
|
r.update({
|
|
constants.PATH_ENV: os.environ[constants.PATH_ENV],
|
|
'DCOS_SNAKEOIL_CRT_PATH': os.environ.get(
|
|
"DCOS_SNAKEOIL_CRT_PATH", "/dcos-cli/adminrouter/snakeoil.crt"),
|
|
'DCOS_URL': 'https://dcos.snakeoil.mesosphere.com'
|
|
})
|
|
|
|
return r
|
|
|
|
|
|
def test_dont_verify_ssl_with_env_var(env):
|
|
env['DCOS_SSL_VERIFY'] = 'false'
|
|
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 0
|
|
assert stderr == b''
|
|
|
|
env.pop('DCOS_SSL_VERIFY')
|
|
|
|
|
|
def test_dont_verify_ssl_with_config(env):
|
|
with update_config('core.ssl_verify', 'false', env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 0
|
|
assert stderr == b''
|
|
|
|
|
|
def test_verify_ssl_without_cert_env_var(env):
|
|
env['DCOS_SSL_VERIFY'] = 'true'
|
|
with update_config('core.ssl_verify', None, env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 1
|
|
assert stderr.decode('utf-8') == _ssl_error_msg()
|
|
|
|
env.pop('DCOS_SSL_VERIFY')
|
|
|
|
|
|
def test_verify_ssl_without_cert_config(env):
|
|
with update_config('core.ssl_verify', 'true', env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 1
|
|
assert stderr.decode('utf-8') == _ssl_error_msg()
|
|
|
|
|
|
def test_verify_ssl_with_bad_cert_env_var(env):
|
|
env['DCOS_SSL_VERIFY'] = 'tests/data/ssl/fake.pem'
|
|
|
|
with update_config('core.ssl_verify', None, env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 1
|
|
assert stderr.decode('utf-8') == _ssl_error_msg()
|
|
|
|
env.pop('DCOS_SSL_VERIFY')
|
|
|
|
|
|
def test_verify_ssl_with_bad_cert_config(env):
|
|
with update_config('core.ssl_verify', 'tests/data/ssl/fake.pem', env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 1
|
|
assert stderr.decode('utf-8') == _ssl_error_msg()
|
|
|
|
|
|
@pytest.mark.skipif(True, reason='Need to resolve DCOS-9273 to validate certs')
|
|
def test_verify_ssl_with_good_cert_env_var(env):
|
|
env['DCOS_SSL_VERIFY'] = env['DCOS_SNAKEOIL_CRT_PATH']
|
|
|
|
with update_config('core.ssl_verify', None, env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 0
|
|
assert stderr == b''
|
|
|
|
env.pop('DCOS_SSL_VERIFY')
|
|
|
|
|
|
@pytest.mark.skipif(True, reason='Need to resolve DCOS-9273 to validate certs')
|
|
def test_verify_ssl_with_good_cert_config(env):
|
|
with update_config(
|
|
'core.ssl_verify', env['DCOS_SNAKEOIL_CRT_PATH'], env):
|
|
returncode, stdout, stderr = exec_command(
|
|
['dcos', 'marathon', 'app', 'list'], env)
|
|
assert returncode == 0
|
|
assert stderr == b''
|
|
|
|
|
|
def _ssl_error_msg():
|
|
return (
|
|
"An SSL error occurred. To configure your SSL settings, please run: "
|
|
"`dcos config set core.ssl_verify <value>`\n"
|
|
"<value>: Whether to verify SSL certs for HTTPS or path to certs. "
|
|
"Valid values are True, False, or a path to a CA_BUNDLE.\n")
|