cloud/blockstore/libs/root_kms/impl/client_ut.cpp - main - githubmirror/nbs

cloud/blockstore/libs/root_kms/impl/client_ut.cpp
111 строк3 KB
Pavel Misko
issue-176: remove redundand base64 encoding (#3293)
01 апр 2025, 13:14
01 апр 2025, 13:14c3d3fde
#include "client.h"

#include <cloud/blockstore/libs/encryption/encryption_key.h>
#include <cloud/blockstore/libs/root_kms/iface/client.h>
#include <cloud/storage/core/libs/diagnostics/logging.h>

#include <library/cpp/string_utils/base64/base64.h>
#include <library/cpp/testing/unittest/registar.h>

#include <util/generic/string.h>
#include <util/system/env.h>

#include <chrono>

namespace NCloud::NBlockStore {

using namespace std::chrono_literals;

namespace {

////////////////////////////////////////////////////////////////////////////////

struct TFixture
    : NUnitTest::TBaseFixture
{
    const TString KekId = "nbs";
    const ILoggingServicePtr Logging =
        CreateLoggingService("console", {.FiltrationLevel = TLOG_DEBUG});

    IRootKmsClientPtr Client;

    void SetUp(NUnitTest::TTestContext&) override
    {
        Client = CreateRootKmsClient(
            Logging,
            {.Address = "localhost:" + GetEnv("FAKE_ROOT_KMS_PORT"),
             .RootCertsFile = GetEnv("FAKE_ROOT_KMS_CA"),
             .CertChainFile = GetEnv("FAKE_ROOT_KMS_CLIENT_CRT"),
             .PrivateKeyFile = GetEnv("FAKE_ROOT_KMS_CLIENT_KEY")});
        Client->Start();

        while (!IsRootKmsAlive()) {
            Sleep(1s);
        }
    }

    void TearDown(NUnitTest::TTestContext&) override
    {
        Client->Stop();
    }

    bool IsRootKmsAlive() const
    {
        const auto future = Client->Decrypt(TString(), TString());
        const auto& [_, error] = future.GetValueSync();

        return error.GetCode() == E_GRPC_NOT_FOUND;
    }
};

}   // namespace

////////////////////////////////////////////////////////////////////////////////


Y_UNIT_TEST_SUITE(TRootKmsClientTest)
{
    Y_UNIT_TEST_F(ShouldGenerateAndDecryptDEK, TFixture)
    {
        {
            auto gen = Client->GenerateDataEncryptionKey(KekId);

            auto [key, genError] = gen.GetValueSync();

            UNIT_ASSERT_VALUES_EQUAL_C(S_OK, genError.GetCode(), genError);
            UNIT_ASSERT_VALUES_EQUAL(KekId, key.GetKekId());
            UNIT_ASSERT_VALUES_UNEQUAL("", key.GetEncryptedDEK());

            auto decrypt = Client->Decrypt(KekId, key.GetEncryptedDEK());

            const auto& [decryptedDEK, decryptError] = decrypt.GetValueSync();
            UNIT_ASSERT_VALUES_EQUAL_C(
                S_OK,
                decryptError.GetCode(),
                decryptError);
            UNIT_ASSERT_VALUES_UNEQUAL("", decryptedDEK.GetKey());
        }

        {
            auto future = Client->GenerateDataEncryptionKey("unknown");

            auto [key, error] = future.GetValueSync();
            UNIT_ASSERT_VALUES_EQUAL_C(
                E_GRPC_NOT_FOUND,
                error.GetCode(),
                error);
        }

        {
            auto future = Client->Decrypt("unknown", "ciphertext");

            const auto& [key, error] = future.GetValueSync();
            UNIT_ASSERT_VALUES_EQUAL_C(
                E_GRPC_NOT_FOUND,
                error.GetCode(),
                error);
        }
    }
}

}   // namespace NCloud::NBlockStore