Function newReloadTestHarness

enterprise/aibridgeproxyd/reload_test.go:148–185

newReloadTestHarness boots a proxy with an empty initial router and a store-backed RefreshProviders. Production wiring is identical: the daemon constructs the proxy without preconfigured provider hosts and lets Reload populate the router from the database.

(t *testing.T)

// daemon constructs the proxy without preconfigured provider hosts and
// lets Reload populate the router from the database.
func newReloadTestHarness(t *testing.T) *reloadTestHarness {
	t.Helper()

	recorder := &aibridgedRecorder{}
	bridged := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		recorder.record(r.URL.Path)
		w.WriteHeader(http.StatusOK)
		_, _ = w.Write([]byte("aibridged"))
	}))
	t.Cleanup(bridged.Close)

	store := &providerStore{}
	metrics := aibridgeproxyd.NewMetrics(prometheus.NewRegistry())
	srv := newTestProxy(t,
		withCoderAccessURL(bridged.URL),
		withAllowedPorts("443"),
		withRefreshProviders(store.refresh),
		withMetrics(metrics),
	)

	certPool := getProxyCertPool(t)
	client := newProxyClient(t, srv, makeProxyAuthHeader("coder-token"), certPool, false)
	// Disable keep-alives so each request opens a fresh CONNECT through
	// the proxy. Per the Reload contract, already-MITM'd tunnels keep
	// the provider name they captured at CONNECT time; only new
	// connections see the post-Reload snapshot. Tests need a fresh
	// CONNECT between phases to assert on the new routing.
	client.Transport.(*http.Transport).DisableKeepAlives = true

	return &reloadTestHarness{
		srv:      srv,
		store:    store,
		metrics:  metrics,
		client:   client,
		bridged:  bridged,
		recorder: recorder,
	}
}

// requestResult is the outcome of sending a request through the proxy.
// Either err is set (CONNECT failed for a non-MITM'd host whose dial