diff options
author | Morten Tokle <mortent@yahooinc.com> | 2022-09-12 09:35:36 +0200 |
---|---|---|
committer | Morten Tokle <mortent@yahooinc.com> | 2022-09-12 09:35:36 +0200 |
commit | 4f8bccce3a80181c5e745acedca0accc8bfa3d68 (patch) | |
tree | 1696a3bcd7b9a82b245024c51fae6f950af5bd25 /config-model/src/test/java/com | |
parent | aa436622a3e954d9da14847339a8ca1055f1a5d1 (diff) |
Restrict data plane bindings
Diffstat (limited to 'config-model/src/test/java/com')
-rw-r--r-- | config-model/src/test/java/com/yahoo/vespa/model/container/xml/HandlerBuilderTest.java | 103 |
1 files changed, 103 insertions, 0 deletions
diff --git a/config-model/src/test/java/com/yahoo/vespa/model/container/xml/HandlerBuilderTest.java b/config-model/src/test/java/com/yahoo/vespa/model/container/xml/HandlerBuilderTest.java index 291a5f21305..0c9b87c0ae3 100644 --- a/config-model/src/test/java/com/yahoo/vespa/model/container/xml/HandlerBuilderTest.java +++ b/config-model/src/test/java/com/yahoo/vespa/model/container/xml/HandlerBuilderTest.java @@ -1,6 +1,8 @@ package com.yahoo.vespa.model.container.xml; import com.yahoo.config.model.builder.xml.test.DomBuilderTest; +import com.yahoo.config.model.deploy.DeployState; +import com.yahoo.config.model.deploy.TestProperties; import com.yahoo.container.ComponentsConfig; import com.yahoo.container.jdisc.JdiscBindingsConfig; import com.yahoo.container.usability.BindingsOverviewHandler; @@ -10,10 +12,14 @@ import com.yahoo.vespa.model.container.component.Handler; import org.junit.jupiter.api.Test; import org.w3c.dom.Element; +import java.util.List; +import java.util.Map; + import static com.yahoo.vespa.model.container.ContainerCluster.ROOT_HANDLER_BINDING; import static com.yahoo.vespa.model.container.ContainerCluster.STATE_HANDLER_BINDING_1; import static org.hamcrest.CoreMatchers.is; import static org.hamcrest.MatcherAssert.assertThat; +import static org.hamcrest.Matchers.containsInAnyOrder; import static org.hamcrest.Matchers.containsString; import static org.hamcrest.Matchers.hasItem; import static org.junit.jupiter.api.Assertions.*; @@ -100,6 +106,103 @@ public class HandlerBuilderTest extends ContainerModelBuilderTestBase { assertTrue(handler.getInjectedComponentIds().contains("threadpool@default-handler-common")); } + @Test + void restricts_default_bindings_in_hosted_vespa() { + DeployState deployState = new DeployState.Builder() + .properties(new TestProperties().setHostedVespa(true).setUseRestrictedDataPlaneBindings(true)) + .build(); + verifyDefaultBindings(deployState, "http://*:4443"); + } + + @Test + void restricts_custom_bindings_in_hosted_vespa() { + DeployState deployState = new DeployState.Builder() + .properties(new TestProperties().setHostedVespa(true).setUseRestrictedDataPlaneBindings(true)) + .build(); + verifyCustomSearchBindings(deployState, "http://*:4443"); + } + + @Test + void does_not_restrict_default_bindings_in_self_hosted() { + DeployState deployState = new DeployState.Builder() + .properties(new TestProperties().setHostedVespa(false).setUseRestrictedDataPlaneBindings(true)) + .build(); + verifyDefaultBindings(deployState, "http://*"); + } + + @Test + void does_not_restrict_custom_bindings_in_self_hosted() { + DeployState deployState = new DeployState.Builder() + .properties(new TestProperties().setHostedVespa(false).setUseRestrictedDataPlaneBindings(true)) + .build(); + verifyCustomSearchBindings(deployState, "http://*"); + } + + private void verifyDefaultBindings(DeployState deployState, String bindingPrefix) { + Element clusterElem = DomBuilderTest.parse( + "<container id='default' version='1.0'>", + " <search/>", + " <document-api/>", + " <handler id='FooHandler'>", + " <binding>http://*/foo</binding>", + " </handler>", + nodesXml, + "</container>"); + + createModel(root, deployState, null, clusterElem); + JdiscBindingsConfig bindingsConfig = root.getConfig(JdiscBindingsConfig.class, "default"); + + // Verify /search /feed /document and custom handler are bound correctly + Map<String, JdiscBindingsConfig.Handlers> handlers = bindingsConfig.handlers(); + Map<String, List<String>> expectedHandlerMappings = Map.of( + "com.yahoo.search.handler.SearchHandler", List.of("/search/*"), + "com.yahoo.document.restapi.resource.DocumentV1ApiHandler", List.of("/document/v1/*", "/document/v1/*/"), + "com.yahoo.vespa.http.server.FeedHandler", List.of("/reserved-for-internal-use/feedapi", "/reserved-for-internal-use/feedapi/"), + "FooHandler", List.of("/foo")); + expectedHandlerMappings.forEach((handler, bindings) -> validateHandler(handlers.get(handler), bindingPrefix, bindings)); + + // All other handlers should be bound to default (http://*/...) + handlers.entrySet().stream() + .filter(e -> ! expectedHandlerMappings.containsKey(e.getKey())) + .forEach(e -> assertTrue(e.getValue().serverBindings().stream().allMatch(s -> s.startsWith("http://*/")))); + } + + private void verifyCustomSearchBindings(DeployState deployState, String bindingPrefix) { + Element clusterElem = DomBuilderTest.parse( + "<container id='default' version='1.0'>", + " <search>", + " <binding>http://*/search-binding/</binding>", + " </search>", + " <document-api>", + " <binding>http://*/docapi-binding/</binding>", + " </document-api>", + nodesXml, + "</container>"); + + createModel(root, deployState, null, clusterElem); + JdiscBindingsConfig bindingsConfig = root.getConfig(JdiscBindingsConfig.class, "default"); + + // Verify search feed and document handler are bound correctly + Map<String, JdiscBindingsConfig.Handlers> handlers = bindingsConfig.handlers(); + Map<String, List<String>> expectedHandlerMappings = Map.of( + "com.yahoo.search.handler.SearchHandler", List.of("/search-binding/"), + "com.yahoo.document.restapi.resource.DocumentV1ApiHandler", List.of("/docapi-binding/document/v1/*", "/docapi-binding/document/v1/*/"), + "com.yahoo.vespa.http.server.FeedHandler", List.of("/docapi-binding/reserved-for-internal-use/feedapi", "/docapi-binding/reserved-for-internal-use/feedapi/")); + expectedHandlerMappings.forEach((handler, bindings) -> validateHandler(handlers.get(handler), bindingPrefix, bindings)); + + // All other handlers should be bound to default (http://*/...) + handlers.entrySet().stream() + .filter(e -> ! expectedHandlerMappings.containsKey(e.getKey())) + .forEach(e -> assertTrue(e.getValue().serverBindings().stream().allMatch(s -> s.startsWith("http://*/")))); + + } + + private void validateHandler(JdiscBindingsConfig.Handlers handler, String bindingPrefix, List<String> expectedBindings) { + assertNotNull(handler); + assertEquals(expectedBindings.size(), handler.serverBindings().size()); + assertThat(handler.serverBindings(), containsInAnyOrder(expectedBindings.stream().map(s->bindingPrefix+s).toArray())); + } + private void createClusterWithJDiscHandler() { Element clusterElem = DomBuilderTest.parse( "<container id='default' version='1.0'>", |