Files
grafana/pkg/services/ngalert/notifier/crypto_test.go
T
2025-07-08 11:03:26 +02:00

111 lines
2.7 KiB
Go

package notifier
import (
"context"
"encoding/base64"
"testing"
"github.com/stretchr/testify/require"
"github.com/grafana/grafana/pkg/services/ngalert/api/tooling/definitions"
"github.com/grafana/grafana/pkg/services/secrets/fakes"
)
func TestEncryptExtraConfigs(t *testing.T) {
config := "plain-text-config"
encryptedConfig := base64.StdEncoding.EncodeToString([]byte(config))
tests := []struct {
name string
inputConfig string
expectedConfig string
}{
{
name: "Encrypts unencrypted configs",
inputConfig: config,
expectedConfig: cryptoPrefix + encryptedConfig,
},
{
name: "Skips already encrypted configs",
inputConfig: cryptoPrefix + "very-encrypted-data",
expectedConfig: cryptoPrefix + "very-encrypted-data",
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
m := fakes.NewFakeSecretsService()
c := &alertmanagerCrypto{
ExtraConfigsCrypto: &ExtraConfigsCrypto{
secrets: m,
},
}
cfg := &definitions.PostableUserConfig{
ExtraConfigs: []definitions.ExtraConfiguration{
{AlertmanagerConfig: tt.inputConfig},
},
}
err := c.EncryptExtraConfigs(context.Background(), cfg)
require.NoError(t, err)
require.Equal(t, tt.expectedConfig, cfg.ExtraConfigs[0].AlertmanagerConfig)
})
}
}
func TestDecryptExtraConfigs(t *testing.T) {
decryptedData := "derypted-data"
decryptedDataBase64 := base64.StdEncoding.EncodeToString([]byte(decryptedData))
tests := []struct {
name string
inputConfig string
expectedError string
expectedConfig string
}{
{
name: "Decrypts encrypted configs",
inputConfig: cryptoPrefix + decryptedDataBase64,
expectedConfig: decryptedData,
},
{
name: "Skips already encrypted configs",
inputConfig: "very-decrypted-data",
expectedConfig: "very-decrypted-data",
},
{
name: "Fails if not base64 encoded",
inputConfig: cryptoPrefix + "plain-text-config",
expectedError: "failed to decode extra configuration",
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
m := fakes.NewFakeSecretsService()
c := &alertmanagerCrypto{
ExtraConfigsCrypto: &ExtraConfigsCrypto{
secrets: m,
},
}
cfg := &definitions.PostableUserConfig{
ExtraConfigs: []definitions.ExtraConfiguration{
{AlertmanagerConfig: tt.inputConfig},
},
}
err := c.DecryptExtraConfigs(context.Background(), cfg)
if tt.expectedError != "" {
require.ErrorContains(t, err, tt.expectedError)
return
}
require.NoError(t, err)
require.Equal(t, tt.expectedConfig, cfg.ExtraConfigs[0].AlertmanagerConfig)
})
}
}