main_test.go

package main

import (
	"os"
	"testing"

	dns "github.com/cert-manager/cert-manager/test/acme"
)

var (
	zone      = os.Getenv("TEST_ZONE_NAME")
	dnsServer = getEnv("TEST_DNS_SERVER", "8.8.8.8:53")
)

func test(t *testing.T, manifestPath string) {
	// The manifest path should contain a file named config.json that is a
	// snippet of valid configuration that should be included on the
	// ChallengeRequest passed as part of the test cases.

	fixture := dns.NewFixture(&powerDNSProviderSolver{},
		dns.SetDNSServer(dnsServer),
		dns.SetResolvedZone(zone),
		dns.SetAllowAmbientCredentials(false),
		dns.SetManifestPath(manifestPath),
		dns.SetStrict(true),
	)

	fixture.RunConformance(t)
}

func TestNoProxyNoTLS(t *testing.T) {
	test(t, "_out/testdata/no-tls")
}

func TestNoProxyNoTLSAuthHdr(t *testing.T) {
	test(t, "_out/testdata/no-tls-auth-hdr")
}

func TestNoProxyTLS(t *testing.T) {
	test(t, "_out/testdata/tls")
}

func TestNoProxyTLSAuthHdr(t *testing.T) {
	test(t, "_out/testdata/tls-auth-hdr")
}

func TestProxyNoTLS(t *testing.T) {
	test(t, "_out/testdata/no-tls-with-proxy")
}

func TestProxyTLS(t *testing.T) {
	test(t, "_out/testdata/tls-with-proxy")
}

func getEnv(key, fallback string) string {
	if value, ok := os.LookupEnv(key); ok {
		return value
	}
	return fallback
}

func TestIsAllowedZones(t *testing.T) {
	cfg := powerDNSProviderConfig{
		AllowedZones: []string{"example.com.", "example.org."},
	}

	tests := []struct {
		zone    string
		matched bool
	}{
		{"foo.example.com.", true},
		{"foo.example.net.", false},
		{"example.com.", true},
		{"notexample.com.", false},
	}

	for _, tt := range tests {
		t.Run(tt.zone, func(t *testing.T) {
			match := cfg.IsAllowedZone(tt.zone)
			if match != tt.matched {
				t.Errorf("Unexpected IsAllowedZone(%s) = %t, expected %t", tt.zone, match, tt.matched)
			}
		})
	}
}