Merge e7bcf94 into 73260f7

square · Jun 29, 2016 · 385b016 · 385b016
2 parents 73260f7 + e7bcf94
commit 385b016
Show file tree

Hide file tree

Showing 11 changed files with 330 additions and 1 deletion.
diff --git a/cache_test.go b/cache_test.go
@@ -210,6 +210,31 @@ func TestCacheSecretAvoidsBackendWhenResultFresh(t *testing.T) {
 	assert.Equal(fixture1, secret) // fixture1 comes form the backend
 }
 
+func TestCacheSecretUsesBackendWhenResultStale(t *testing.T) {
+	assert := assert.New(t)
+
+	fixture1, _ := ParseSecret(fixture("secret.json"))
+	fixture2, _ := ParseSecret(fixture("secretNormalOwner.json"))
+	fixture2.Name = fixture1.Name
+
+	// Backend returns fixture1, then fixture2
+	secretc := make(chan *Secret, 2)
+	backend := ChannelBackend{secretc: secretc}
+	secretc <- fixture1
+	secretc <- fixture2
+
+	timeouts = Timeouts{1 * time.Nanosecond, 10 * time.Millisecond, 20 * time.Millisecond, 1 * time.Hour}
+	cache := NewCache(backend, timeouts, logConfig, nil)
+	secret, ok := cache.Secret(fixture1.Name)
+	assert.True(ok)
+	assert.Equal(fixture1, secret)
+
+	time.Sleep(2 * time.Nanosecond)
+	secret, ok = cache.Secret(fixture1.Name)
+	assert.True(ok)
+	assert.Equal(fixture2, secret)
+}
+
 func TestCacheSecretListUsesValuesFromCacheIfClientFails(t *testing.T) {
 	assert := assert.New(t)
 

diff --git a/integration_test/fake_server.go b/integration_test/fake_server.go
@@ -0,0 +1,55 @@
+package main
+
+import (
+    "fmt"
+    "log"
+    "net/http"
+    "encoding/json"
+    "encoding/base64"
+    "sync/atomic"
+
+    "github.com/gorilla/mux"
+)
+
+type Secret struct {
+    Name          string  `json:"name"`
+    Secret        string  `json:"secret"`
+    SecretLength  int     `json:"secretLength"`
+    CreationDate  string  `json:"creationDate"`
+}
+
+var counter uint32
+
+func main() {
+    router := mux.NewRouter()
+    router.HandleFunc("/secret/{secretName}", GetSecret)
+    router.HandleFunc("/secrets", ListSecrets)
+
+
+    err := http.ListenAndServeTLS(":8080", "server.crt", "server.key", router)
+    if err != nil {
+      log.Fatal("ListenAndServe: ", err)
+    }
+}
+
+func ListSecrets(w http.ResponseWriter, r *http.Request) {
+  secrets := []Secret{
+    Secret{Name:"test_secret", Secret:"", SecretLength:0, CreationDate:"2016-06-29T20:05:21.000Z"},
+  }
+  json.NewEncoder(w).Encode(secrets)
+}
+
+func GetSecret(w http.ResponseWriter, r *http.Request) {
+    vars := mux.Vars(r)
+    secretName := vars["secretName"]
+    if secretName == "test_secret" {
+      c := atomic.AddUint32(&counter, 1)
+      s := fmt.Sprintf("hello_%d", c)
+      secret := Secret{Name: "test_secret", Secret: base64.StdEncoding.EncodeToString([]byte(s)),
+        SecretLength: 12, CreationDate: "2016-06-29T20:05:21.000Z"}
+      json.NewEncoder(w).Encode(secret)
+    } else {
+      w.WriteHeader(http.StatusNotFound)
+      fmt.Fprintln(w, "<html><body>HTTP ERROR 404</body></html>")
+    }
+}
diff --git a/integration_test/glide.lock b/integration_test/glide.lock
diff --git a/integration_test/glide.yaml b/integration_test/glide.yaml
@@ -0,0 +1,6 @@
+package: github.com/square/keywhiz-fs/integration_test
+import:
+- package: github.com/gorilla/mux
+- package: github.com/stretchr/testify
+  subpackages:
+  - assert
diff --git a/integration_test/integration_test.go b/integration_test/integration_test.go
@@ -0,0 +1,96 @@
+package main
+
+import (
+  "os/exec"
+  "log"
+  "io/ioutil"
+  "testing"
+  "time"
+
+  "github.com/stretchr/testify/assert"
+)
+
+var server *exec.Cmd
+var kwfs *exec.Cmd
+
+func TestIntegrationTest(t *testing.T) {
+  defer cleanup()
+
+  assert := assert.New(t)
+
+  // start fake_server
+  server = exec.Command("./fake_server")
+  err := server.Start()
+  if err != nil {
+    t.Log(err)
+    t.Fail()
+    return
+	}
+  t.Log("fake_server started")
+
+  // start keywhiz-fs
+  kwfs = exec.Command("../keywhiz-fs", "--cert", "kwfs.crt", "--key",
+    "kwfs.key", "--ca", "keywhiz.crt", "--asuser", "alok", "--group",
+    "staff", "--debug", "--disable-mlock", "https://localhost:8080/", "mount/")
+  err = kwfs.Start()
+  if err != nil {
+    t.Log(err)
+    t.Fail()
+    return
+  }
+  t.Log("kwfs started")
+
+  // check that ls returns the right data
+  time.Sleep(1 * time.Second)
+  files, err := ioutil.ReadDir("mount")
+	if err != nil {
+    t.Log(err)
+    t.Fail()
+    return
+	}
+  fileNames := make([]string, len(files))
+  for i, v := range files {
+    fileNames[i] = v.Name()
+  }
+  // fileNames should contain: .clear_cache .json .running .version test_secret
+  assert.Contains(fileNames, "test_secret")
+
+  // check that cat returns the right data
+  content, err := ioutil.ReadFile("mount/test_secret")
+  if err != nil {
+    t.Log(err)
+    t.Fail()
+    return
+  }
+  // bug in kwfs?
+  assert.Equal([]byte("hello_1\x00\x00\x00\x00\x00"), content)
+
+  // sleep 1
+  time.Sleep(1 * time.Second)
+
+  // check that cat returns new data
+  content, err = ioutil.ReadFile("mount/test_secret")
+  if err != nil {
+    t.Log(err)
+    t.Fail()
+    return
+  }
+  assert.Equal([]byte("hello_2\x00\x00\x00\x00\x00"), content)
+}
+
+func cleanup() {
+  // terminate fake_server and kwfs
+  err := server.Process.Kill()
+  if err != nil {
+    log.Fatal(err)
+  }
+  err = kwfs.Process.Kill()
+  if err != nil {
+    log.Fatal(err)
+  }
+  // kwfs should unmount on exit, but it doesn't?
+  err = exec.Command("/sbin/umount", "mount").Run()
+  if err != nil {
+    log.Fatal(err)
+  }
+}
diff --git a/integration_test/keywhiz.crt b/integration_test/keywhiz.crt
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/integration_test/kwfs.crt b/integration_test/kwfs.crt
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/integration_test/kwfs.key b/integration_test/kwfs.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/integration_test/server.crt b/integration_test/server.crt
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----
+MIIEWzCCAkOgAwIBAgIRALvelbnxG6HFHiKJnlKPAC8wDQYJKoZIhvcNAQELBQAw
+JDEQMA4GA1UEChMHa2V5d2hpejEQMA4GA1UEAxMHa2V5d2hpejAeFw0xNjA2Mjky
+MTAzNTZaFw0xODA2MjkyMTAzNTZaMCMxEDAOBgNVBAoTB2tleXdoaXoxDzANBgNV
+BAMTBnNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgf4XBv
+4I9udrE1tKUpoEbR/yAkwj9YmLW9+qeqrydK1UpaEDS5zXDy+/SY8FR3onW4QFEW
+75rtRHp6CHE2Kw1doeCHZ8b8wNWdIFlMhaP8WYm6hDlRyTKVXmHIUsMT9QusQTzs
+KaG/yt7JELBKwzhozm7ef6769fKTm2Z2WqBrWMJRjSQpEWURG1OJVFXOIJyT2QA5
+F0F21YZVC89kBZ+EhvLrbCbl0p2fDMKnp9+t9UQyJR4j1fF6nTp/8UpiJRVM+90C
+8TSIl8tG2jnd3dzfi0ENwtwFdvkKuhR1Y3/e/S/6ui2cpXGAqX3AdvU9A9OpJtWq
+YmLf8XUvQAZCaf0CAwEAAaOBiDCBhTAOBgNVHQ8BAf8EBAMCA7gwHQYDVR0lBBYw
+FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBR/oZ2N3oSR5N2MJ9C7Gr3h
+tHORVTAfBgNVHSMEGDAWgBT18NwEuht1wkuIcdXItaWAYqbXTTAUBgNVHREEDTAL
+gglsb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggIBAKib2drlTpb/C67tgFe4CH35
+8cQzjWmYE8Se0hGlAC4aPf3BvsB3BGsw+NJrJJuLUF/Yv3vNTDH68dbXugRXbIdG
+YtGgBhllChgmtO8poFk0NKkM5wtvYN9HNXXD3b4YRiWk6L0IMwQp153+Vf4wrCBg
+AUozhdCRfAV/dnOF48h9w6SSDELgM8tiLg413uQhns7xZU+A1PIyAex1xvyP768e
+GR/uskxnKHND69tIz9H4Bw8s1l+iUQWiK1DXUZwDnDGP2591meeqxUiuZOAmBuKl
+Hhy/NLLB9oTbB7QlRIp9SIOUS+QnPMJZklkEhmS5pg+ShaZTu3dJJqirdJhpF1bn
+EndYuUi24mie2p44WoJBjp+LjD3zt41MCpjRAb/9Dttd2QqOdhXqeTaod05qrY/j
+cOYJbdsqRJpcob9CBnHRjOUl1p3T8XXf8A+VVw6RvW1tiSbmIbYf+SarTpVR4fuZ
+gn+y1PTyp1xWm8fG5NaKB3P+ZPEjFUYMqlYcwzH5pESv7PjrZSG0DYOBeRm3z8ko
++rpcwBzgIICS8v6sdxeJH4xcpxe+QZfaUtmIxuku2mK6u71ggg1/DLAj3Ujt9FrB
+vk7zSi+6jlHZRyitjqsTwG7hP6D6PNn1rHPp9POuWFcIT7o6O6khQj5FzztmTxLQ
+tbMp3Yzex0ZCVs6TbLNx
+-----END CERTIFICATE-----
diff --git a/integration_test/server.key b/integration_test/server.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAyB/hcG/gj252sTW0pSmgRtH/ICTCP1iYtb36p6qvJ0rVSloQ
+NLnNcPL79JjwVHeidbhAURbvmu1EenoIcTYrDV2h4IdnxvzA1Z0gWUyFo/xZibqE
+OVHJMpVeYchSwxP1C6xBPOwpob/K3skQsErDOGjObt5/rvr18pObZnZaoGtYwlGN
+JCkRZREbU4lUVc4gnJPZADkXQXbVhlULz2QFn4SG8utsJuXSnZ8Mwqen3631RDIl
+HiPV8XqdOn/xSmIlFUz73QLxNIiXy0baOd3d3N+LQQ3C3AV2+Qq6FHVjf979L/q6
+LZylcYCpfcB29T0D06km1apiYt/xdS9ABkJp/QIDAQABAoIBADFjnNGQ6sy7KFPH
+u1NfmIyh2uLl74KOrPF9d1TVzPBXiZgV7hX1HPyZGxFchUNzWwbOeCELFgsYL2RC
+pb667ZkY2JB/Gl+DlVuisY8YUYsNBlP1UhiLVKpFLsvXEoXOcRV2Z4tPhV7D5J9i
+49l+Ofu78eZuxvg6O2SohRuebfNU2xQdsL8ky6VQFBcD9F3B/GD3Gck6Ojy3t792
+DN4Q3OlYwQDhFZTSn1myra1rLjWRtmLRs4V2ZMkSd7qqoQkcED+zL2MlClR97Z9F
+5RSbvAjoSYB9rNgntOiDtEc+s8l9YLVjnDndPiIMUjyADqOuSACLukq/rgCoaCmY
+YLznHcECgYEA4f3qyaZp9DxS1FYmnAcY1ntvfU5DPItc+23wU6XizHt3TyYR3RZx
+D6kxqEunw10Sn0Jm/9Khn3VTmYv7u7AQbAVLGrDlf65gxjXZHy5yIJ2LG2M6LAve
+hY/Hmq6Wwh6yvtCz4MB6nx+7PxFaaEyWehzDyf3dxzbSFBtXGNtsnbUCgYEA4rKp
+evRmRn/1jsSH/RF6+j85JOTUuCDYSRfj4BQDyaVe4l39cvyzHuDExa2Xl8PJhbxG
+sVJQ46Z86lbTCXJ6mcI89rFpG+cU0sycu9wVJo5OSg6nF3b4G3po8E+RiEYGgcFP
+PoLro+Gbj/RCrgSYjRaoqlQkuU2SNE8q9YrhiCkCgYBk8T7jLVLcRemVcJm0TbM5
+ck8dQEzmCTXSFIwpQMpqHafwEYgfIbwEi8Vjb8+SgssjmcxZ7mJE0Go0BoO9lOnw
+5fhjBqqr+l69iiXeOKe/i78rz4mXTQHq1IsKu3sZYA7lDmGaPT9IPissA3tHZRY9
+mwWU/rEGH6V8V63yq2f7lQKBgG2WUomGld5kww72AIscpSdN4tDr8czky8lhzB2p
+bz9OOvUQ3JF2iRxXKagpx4ts8QE+R6o2kbXK6L3bpP7/ITctB411q8r6RT21/dpu
+hKbzyfLQ7INSVpPp88qfnEmVGFYnXahpX4IEcNABEy7ON/SUTIqyTGJrlk7FKo4y
+Sd4pAoGAec+Fm3TGUxRNtZau1N4/7fxy9uq6barlIw4MUeiHsMvnnEsHjUK5M16D
+ZHh5XkXUmyu4gIG9Hf0C0pueEHkJ59ebKntfBu2zRP6Uu4lzKQqOnNPw7HkocWVB
+upi7+QcCCAbGbS10wHQNMpvR8UYRowfIu6yTpVzAfE0rWUO3MZk=
+-----END RSA PRIVATE KEY-----
diff --git a/main.go b/main.go
@@ -69,7 +69,7 @@ func main() {
 		lockMemory()
 	}
 
-	freshThreshold := 1 * time.Hour
+	freshThreshold := 1 * time.Second
 	backendDeadline := 5 * time.Second
 	maxWait := *timeout + backendDeadline
 	delayDeletion := 1 * time.Hour