Files
nomad/command/agent/host/host_test.go
Piotr Kazmierczak 368241dbf2 security: a more comprehensive env.denylist (#24540)
A more comprehensive env.denylist that now includes more token, token file and
license variables. 

---------

Co-authored-by: Daniel Bennett <dbennett@hashicorp.com>
2024-11-22 18:54:18 +01:00

46 lines
1.2 KiB
Go

// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: BUSL-1.1
package host
import (
"testing"
"github.com/shoenig/test/must"
)
func TestHostUtils(t *testing.T) {
mounts := mountedPaths()
must.SliceNotEmpty(t, mounts)
du, err := diskUsage("/")
must.NoError(t, err)
must.Positive(t, du.DiskMB)
must.Positive(t, du.UsedMB)
}
func TestMakeHostData(t *testing.T) {
t.Setenv("VAULT_TOKEN", "foo")
t.Setenv("BOGUS_TOKEN", "foo")
t.Setenv("BOGUS_SECRET", "foo")
t.Setenv("ryanSECRETS", "foo")
t.Setenv("CONSUL_LICENSE_PATH", "foo")
t.Setenv("AWS_ACCESS_KEY_ID", "foo")
host, err := MakeHostData()
must.NoError(t, err)
must.NotEq(t, "", host.OS)
must.SliceNotEmpty(t, host.Network)
must.NotEq(t, "", host.ResolvConf)
must.NotEq(t, "", host.Hosts)
must.MapNotEmpty(t, host.Disk)
must.MapNotEmpty(t, host.Environment)
must.Eq(t, "<redacted>", host.Environment["VAULT_TOKEN"])
must.Eq(t, "<redacted>", host.Environment["BOGUS_TOKEN"])
must.Eq(t, "<redacted>", host.Environment["BOGUS_SECRET"])
must.Eq(t, "<redacted>", host.Environment["ryanSECRETS"])
must.Eq(t, "<redacted>", host.Environment["CONSUL_LICENSE_PATH"])
must.Eq(t, "<redacted>", host.Environment["AWS_ACCESS_KEY_ID"])
}