Set VAULT_DEV_LISTEN_ADDRESS in dev mode (#446)

Binds vault to 0.0.0.0 in dev mode so that external traffic is
accepted.
This commit is contained in:
Theron Voran 2021-01-15 15:42:50 -08:00 committed by GitHub
parent 91e9446bfc
commit 69a3dc618d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 37 additions and 14 deletions

View file

@ -132,6 +132,8 @@ Set's additional environment variables based on the mode.
{{ if eq .mode "dev" }} {{ if eq .mode "dev" }}
- name: VAULT_DEV_ROOT_TOKEN_ID - name: VAULT_DEV_ROOT_TOKEN_ID
value: {{ .Values.server.dev.devRootToken }} value: {{ .Values.server.dev.devRootToken }}
- name: VAULT_DEV_LISTEN_ADDRESS
value: "[::]:8200"
{{ end }} {{ end }}
{{- end -}} {{- end -}}

View file

@ -273,6 +273,35 @@ load _helpers
[ "${actual}" = "customtoken" ] [ "${actual}" = "customtoken" ]
} }
#--------------------------------------------------------------------
# dev listen address
@test "server/dev-StatefulSet: set dev listen address in dev mode" {
cd `chart_dir`
local objects=$(helm template \
--show-only templates/server-statefulset.yaml \
--set 'server.dev.enabled=true' \
. | tee /dev/stderr |
yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
local value=$(echo $objects |
yq -r 'map(select(.name=="VAULT_DEV_LISTEN_ADDRESS")) | .[] .value' | tee /dev/stderr)
[ "${value}" = "[::]:8200" ]
}
@test "server/dev-StatefulSet: dev listen address isn't set in non-dev mode" {
cd `chart_dir`
local objects=$(helm template \
--show-only templates/server-statefulset.yaml \
--set 'server.dev.enabled=false' \
. | tee /dev/stderr |
yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
local name=$(echo $objects |
yq -r 'map(select(.name=="VAULT_DEV_LISTEN_ADDRESS")) | .[] .name' | tee /dev/stderr)
[ "${name}" = "" ]
}
#-------------------------------------------------------------------- #--------------------------------------------------------------------
# extraEnvironmentVars # extraEnvironmentVars
@ -286,21 +315,13 @@ load _helpers
. | tee /dev/stderr | . | tee /dev/stderr |
yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr) yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
local actual=$(echo $object | local value=$(echo $object |
yq -r '.[12].name' | tee /dev/stderr) yq -r 'map(select(.name=="FOO")) | .[] .value' | tee /dev/stderr)
[ "${actual}" = "FOO" ] [ "${value}" = "bar" ]
local actual=$(echo $object | local value=$(echo $object |
yq -r '.[12].value' | tee /dev/stderr) yq -r 'map(select(.name=="FOOBAR")) | .[] .value' | tee /dev/stderr)
[ "${actual}" = "bar" ] [ "${value}" = "foobar" ]
local actual=$(echo $object |
yq -r '.[13].name' | tee /dev/stderr)
[ "${actual}" = "FOOBAR" ]
local actual=$(echo $object |
yq -r '.[13].value' | tee /dev/stderr)
[ "${actual}" = "foobar" ]
} }
#-------------------------------------------------------------------- #--------------------------------------------------------------------