def test_save(self):
"""New configuration is successfully written and comments are preserved."""
config = BiAlertConfig()
config._config['force_destroy'] = True
config.aws_region = 'us-west-2'
config.name_prefix = 'new_name_prefix'
config.enable_carbon_black_downloader = False
config.carbon_black_url = 'https://example2.com'
config.encrypted_carbon_black_api_token = 'B' * 100
config.save()
# Verify that all of the original comments were preserved.
with open(CONFIG_FILE) as config_file:
raw_data = config_file.read()
for i in range(1, 6):
self.assertIn('comment{}'.format(i), raw_data)
new_config = BiAlertConfig()
self.assertEqual(True, new_config._config['force_destroy'])
self.assertEqual(config.aws_region, new_config.aws_region)
self.assertEqual(config.name_prefix, new_config.name_prefix)
self.assertEqual(config.enable_carbon_black_downloader,
new_config.enable_carbon_black_downloader)
self.assertEqual(config.encrypted_carbon_black_api_token,
new_config.encrypted_carbon_black_api_token)
def test_encrypt_cb_api_token(self, mock_subprocess: mock.MagicMock,
mock_print: mock.MagicMock,
mock_getpass: mock.MagicMock,
mock_client: mock.MagicMock):
"""Verify that token encryption is done correctly."""
mock_client('kms').encrypt.return_value = {
'CiphertextBlob': base64.b64encode(b'a' * 50)
}
config = BiAlertConfig()
config._encrypt_cb_api_token()
# Verify decrypted value
mock_client('kms').decrypt = lambda **kwargs: {
'Plaintext': base64.b64decode(kwargs['CiphertextBlob'])
}
self.assertEqual(b'a' * 50, config.plaintext_carbon_black_api_token)
# Verify that the mocks were called as expected.
mock_client.assert_has_calls([
mock.call().encrypt(KeyId=mock.ANY,
Plaintext=mock_getpass.return_value)
])
mock_getpass.assert_called_once()
mock_print.assert_has_calls([
mock.call('Terraforming KMS key...'),
mock.call('Encrypting API token...')
])
mock_subprocess.assert_has_calls([
mock.call(['terraform', 'init']),
mock.call([
'terraform', 'apply',
'-target=aws_kms_alias.encrypt_credentials_alias'
])
])
def test_variable_not_defined(self):
"""InvalidConfigError is raised if a variable declaration is missing."""
with open(CONFIG_FILE, 'w') as config_file:
config_file.write('aws_region = "us-east-1"\n')
with self.assertRaises(InvalidConfigError):
BiAlertConfig()
def test_validate_invalid(self):
"""Test validate() with an invalid configuration file."""
self._write_config(region='BAD_REGION')
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.validate()
def test_validate_valid_without_downloader(self):
"""Test validate() without any CarbonBlack values set - still valid."""
self._write_config(enable_downloader=False,
cb_url='',
encrypted_api_token='')
config = BiAlertConfig()
config.validate()
def test_validate_valid_with_downloader(self):
"""Test validate() with all values set correctly."""
config = BiAlertConfig()
config.validate()
# None of the instance properties should have changed.
self.test_property_accesses()
def test_property_accesses(self):
"""Access each property in the BiAlertConfig."""
config = BiAlertConfig()
self.assertEqual('123412341234', config.aws_account_id)
self.assertEqual('us-test-1', config.aws_region)
self.assertEqual('test_prefix', config.name_prefix)
self.assertEqual(True, config.enable_carbon_black_downloader)
self.assertEqual('https://cb-example.com', config.carbon_black_url)
self.assertEqual('A' * 100, config.encrypted_carbon_black_api_token)
self.assertEqual('test.prefix.BiAlert-binaries.us-test-1',
config.BiAlert_s3_bucket_name)
self.assertEqual('test_prefix_BiAlert_analyzer_queue',
config.BiAlert_analyzer_queue_name)
self.assertEqual('test_prefix_BiAlert_downloader_queue',
config.BiAlert_downloader_queue_name)
self.assertEqual(5, config.retro_batch_size)
def test_configure_with_no_defaults(self, mock_encrypt: mock.MagicMock,
mock_user_input: mock.MagicMock):
"""Test configure() without any values set - no defaults should print."""
self._write_config(region='',
prefix='',
enable_downloader=False,
cb_url='',
encrypted_api_token='')
config = BiAlertConfig()
config.configure()
# Verify the mock calls.
mock_encrypt.assert_called_once()
mock_user_input.assert_has_calls([
mock.call('AWS Region: '),
mock.call('Unique name prefix, e.g. "company_team": '),
mock.call('Enable the CarbonBlack downloader? (no): '),
mock.call('CarbonBlack URL: '),
])
def test_configure_with_defaults(self, mock_encrypt: mock.MagicMock,
mock_user_input: mock.MagicMock):
"""Test configure() when all variables have already had set values."""
config = BiAlertConfig()
config.configure()
# Verify the mock calls.
mock_encrypt.assert_called_once()
mock_user_input.assert_has_calls([
mock.call('AWS Region (us-test-1): '),
mock.call(
'Unique name prefix, e.g. "company_team" (test_prefix): '),
mock.call('Enable the CarbonBlack downloader? (yes): '),
mock.call('CarbonBlack URL (https://cb-example.com): '),
mock.call('Change the CarbonBlack API token? (no): ')
])
# Verify that the configuration has changed.
self.assertEqual('us-west-2', config.aws_region)
self.assertEqual('new_name_prefix', config.name_prefix)
self.assertEqual(1, config.enable_carbon_black_downloader)
def __init__(self) -> None:
"""Parse the terraform.tfvars config file."""
self._config = BiAlertConfig()
def test_invalid_encrypted_carbon_black_api_token(self):
"""InvalidConfigError raised if encrypted token is too short."""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.encrypted_carbon_black_api_token = 'ABCD'
def test_invalid_carbon_black_url(self):
"""InvalidConfigError raised if URL doesn't start with http(s)."""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.carbon_black_url = 'example.com'
def test_invalid_enable_carbon_black_downloader(self):
"""InvalidConfigError raised if enable_downloader is not an int."""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.enable_carbon_black_downloader = '1'
def test_invalid_name_prefix(self):
"""InvalidConfigError raised if name prefix is blank."""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.name_prefix = ""
def test_invalid_aws_region(self):
"""InvalidConfigError raised if AWS region is set incorrectly."""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.aws_region = 'us-east-1-'
def test_invalid_aws_account_id(self):
"""InvalidConfigError raised if AWS account ID is not a 12-digit number"""
config = BiAlertConfig()
with self.assertRaises(InvalidConfigError):
config.aws_account_id = '1234'