7b40322bbe
* Encryption: Move secrets migrations into secrets.Migrator * Encryption: Refactor secrets.Service initialization * Encryption: Add support to run secrets migrations even when EE is disabled * Init EE providers on-demand (only when needed) * Add multiple tests + some adjustments * Apply feedback
56 lines
1.5 KiB
Go
56 lines
1.5 KiB
Go
package manager
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/grafana/grafana/pkg/infra/usagestats"
|
|
"github.com/grafana/grafana/pkg/services/encryption/ossencryption"
|
|
"github.com/grafana/grafana/pkg/services/featuremgmt"
|
|
"github.com/grafana/grafana/pkg/services/kmsproviders/osskmsproviders"
|
|
"github.com/grafana/grafana/pkg/services/secrets"
|
|
"github.com/grafana/grafana/pkg/setting"
|
|
"github.com/stretchr/testify/require"
|
|
"gopkg.in/ini.v1"
|
|
)
|
|
|
|
func SetupTestService(tb testing.TB, store secrets.Store) *SecretsService {
|
|
return setupTestService(tb, store, featuremgmt.WithFeatures())
|
|
}
|
|
|
|
func SetupDisabledTestService(tb testing.TB, store secrets.Store) *SecretsService {
|
|
return setupTestService(tb, store, featuremgmt.WithFeatures(featuremgmt.FlagDisableEnvelopeEncryption))
|
|
}
|
|
|
|
func setupTestService(tb testing.TB, store secrets.Store, features *featuremgmt.FeatureManager) *SecretsService {
|
|
tb.Helper()
|
|
defaultKey := "SdlklWklckeLS"
|
|
if len(setting.SecretKey) > 0 {
|
|
defaultKey = setting.SecretKey
|
|
}
|
|
raw, err := ini.Load([]byte(`
|
|
[security]
|
|
secret_key = ` + defaultKey + `
|
|
|
|
[security.encryption]
|
|
data_keys_cache_ttl = 5m
|
|
data_keys_cache_cleanup_interval = 1ns`))
|
|
require.NoError(tb, err)
|
|
|
|
cfg := &setting.Cfg{Raw: raw}
|
|
|
|
settings := &setting.OSSImpl{Cfg: cfg}
|
|
|
|
encryption := ossencryption.ProvideService()
|
|
secretsService, err := ProvideSecretsService(
|
|
store,
|
|
osskmsproviders.ProvideService(encryption, settings, features),
|
|
encryption,
|
|
settings,
|
|
features,
|
|
&usagestats.UsageStatsMock{T: tb},
|
|
)
|
|
require.NoError(tb, err)
|
|
|
|
return secretsService
|
|
}
|