Function TestClusterValidationMiddleware

middleware/http_cluster_test.go:164–331

(t *testing.T)

}

func TestClusterValidationMiddleware(t *testing.T) {
	const urlPath = "/Test/Me"
	testCases := map[string]struct {
		header             func(r *http.Request)
		serverClusters     []string
		route              string
		expectedStatusCode int
		expectedErrorMsg   string
		expectedLogs       string
		expectedMetrics    string
		shouldPanic        bool
	}{
		"empty server cluster makes ClusterUnaryServerInterceptor panic": {
			serverClusters: []string{},
			shouldPanic:    true,
		},
		"equal request and server clusters give no error": {
			header: func(r *http.Request) {
				r.Header[clusterutil.ClusterValidationLabelHeader] = []string{"cluster"}
			},
			serverClusters:     []string{"cluster"},
			expectedStatusCode: http.StatusOK,
		},
		"different request and server clusters give rise to an error including the request route if soft validation disabled": {
			header: func(r *http.Request) {
				r.Header[clusterutil.ClusterValidationLabelHeader] = []string{"wrong-cluster"}
			},
			serverClusters: []string{"cluster"},
			// Verify that the route from the request context is used.
			route:        "test_argument",
			expectedLogs: `level=warn path=/Test/Me method=GET cluster_validation_labels=[cluster] soft_validation=%t tenant= user_agent= host= client_address= msg="request with wrong cluster validation label" request_cluster_validation_label=wrong-cluster`,
			expectedMetrics: `
                                # HELP test_server_invalid_cluster_validation_label_requests_total Number of requests received by server with invalid cluster validation label.
                                # TYPE test_server_invalid_cluster_validation_label_requests_total counter
                                test_server_invalid_cluster_validation_label_requests_total{cluster_validation_label="cluster",method="test_argument",protocol="http",request_cluster_validation_label="wrong-cluster"} 1
			`,
			expectedStatusCode: http.StatusNetworkAuthenticationRequired,
			expectedErrorMsg:   `rejected request with wrong cluster validation label "wrong-cluster" - it should be one of [cluster]`,
		},
		"different request and server clusters give rise to an error handling an unknown request route if soft validation disabled": {
			header: func(r *http.Request) {
				r.Header[clusterutil.ClusterValidationLabelHeader] = []string{"wrong-cluster"}
			},
			serverClusters: []string{"cluster"},
			// Verify that an empty route in the request context is handled.
			route:        "",
			expectedLogs: `level=warn path=/Test/Me method=GET cluster_validation_labels=[cluster] soft_validation=%t tenant= user_agent= host= client_address= msg="request with wrong cluster validation label" request_cluster_validation_label=wrong-cluster`,
			expectedMetrics: `
                                # HELP test_server_invalid_cluster_validation_label_requests_total Number of requests received by server with invalid cluster validation label.
                                # TYPE test_server_invalid_cluster_validation_label_requests_total counter
                                test_server_invalid_cluster_validation_label_requests_total{cluster_validation_label="cluster",method="<unknown-route>",protocol="http",request_cluster_validation_label="wrong-cluster"} 1
			`,
			expectedStatusCode: http.StatusNetworkAuthenticationRequired,
			expectedErrorMsg:   `rejected request with wrong cluster validation label "wrong-cluster" - it should be one of [cluster]`,
		},
		"empty request cluster and non-empty server cluster give an error including the request route if soft validation disabled": {
			header: func(r *http.Request) {
				r.Header[clusterutil.ClusterValidationLabelHeader] = []string{""}