mesh-adminandClaude Opus 5.5
fddcddfaf7
The local write of a filled file (ADR 0349 §4) accepts only the provisioner client's account, which the declaration names; the reader takes provisioner_account before any controller sends it (contract 10). The apply's record and its rule for what moved become helpers the write uses too. Issue 668. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
51 lines
2.7 KiB
Go
51 lines
2.7 KiB
Go
package validate
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// **The validator a controller imports is the host's**: a declaration the host takes passes, and one
|
|
// it refuses is refused with the host's own words, every problem at once.
|
|
func TestTheValidatorIsTheHosts(t *testing.T) {
|
|
good := `{"declaration": 1, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
|
|
if problems := Declaration([]byte(good)); problems != nil {
|
|
t.Fatalf("a declaration the host takes was refused: %v", problems)
|
|
}
|
|
// And one carrying the lease epoch and sequence the controller sends it under (novox/hq to-be 45
|
|
// §6): a controller validating with this package may send them.
|
|
ordered := `{"declaration": 1, "epoch": 57, "sequence": 3, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
|
|
if problems := Declaration([]byte(ordered)); problems != nil {
|
|
t.Fatalf("a declaration carrying its order was refused: %v", problems)
|
|
}
|
|
// And one carrying a file's owner-at-runtime and the files the provisioner fills (novox/hq ADR 0349 §5): the
|
|
// reader takes them before any controller sends them.
|
|
owned := `{"declaration": 1, "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
|
|
if problems := Declaration([]byte(owned)); problems != nil {
|
|
t.Fatalf("a declaration saying who owns a file at runtime was refused: %v", problems)
|
|
}
|
|
// And one naming the provisioner client's account (novox/hq ADR 0349 §4).
|
|
named := `{"declaration": 1, "provisioner_account": "mesh-node-provisioner", "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
|
|
if problems := Declaration([]byte(named)); problems != nil {
|
|
t.Fatalf("a declaration naming the provisioner client's account was refused: %v", problems)
|
|
}
|
|
for _, bad := range []string{
|
|
`{"declaration": 1, "provisioner_account": "root", "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a"}]}`,
|
|
`{"declaration": 1, "filled_files": ["/etc/none"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`,
|
|
`{"declaration": 1, "resources": []}`,
|
|
`{"declaration": 99, "resources": [{"id": "d", "type": "directory", "path": "/x"}]}`,
|
|
`{"declaration": 1, "resources": [{"id": "d", "type": "nothing-the-host-knows"}]}`,
|
|
`not json`,
|
|
} {
|
|
problems := Declaration([]byte(bad))
|
|
if len(problems) == 0 {
|
|
t.Errorf("a declaration the host refuses was passed: %s", bad)
|
|
}
|
|
for _, p := range problems {
|
|
if strings.TrimSpace(p) == "" {
|
|
t.Errorf("a problem said nothing, for %s", bad)
|
|
}
|
|
}
|
|
}
|
|
}
|