1
0
mirror of https://github.com/zokradonh/kopano-docker synced 2025-06-06 15:36:40 +00:00
kopano-docker/konnect/commander.yaml
Felix Bartels 3f4a56a562
fix external authority support (#367)
* comment currently broken tests (because of read-only container)
* move initial creation out of guest or authority configuration
* instead of copying merge files into destination with slurp
* failsafe authority registration
2020-03-19 15:41:23 +00:00

76 lines
2.5 KiB
YAML

tests:
normal startup:
command: /commander/test-helper.sh && wrapper.sh
exit-code: 0
stdout:
contains:
- "Entrypoint: Allowing guest login"
- "--allow-client-guests"
- "Entrypoint: Allowing dynamic client registration"
- "--allow-dynamic-client-registration"
guests disabled:
command: /commander/test-helper.sh && wrapper.sh && yq . $identifier_registration_conf
stdout:
not-contains:
- "--allow-client-guests"
- "kpop-https://$FQDN/meet/"
config:
env:
allow_client_guests: no
external oidc provider:
command: /commander/test-helper.sh && wrapper.sh && yq . $identifier_registration_conf
stdout:
contains:
- '"authorities": ['
config:
env:
external_oidc_provider: yes
identifier scopes:
command: /commander/test-helper.sh && wrapper.sh && yq . $identifier_scopes_conf
stdout:
contains:
- '"description": "Access Kopano Meet"'
#identifier registration in /etc/kopano:
# command: /commander/test-helper.sh && wrapper.sh && yq . $identifier_registration_conf
# config:
# env:
# identifier_registration_conf: /etc/kopano/konnectd-identifier-registration.yaml
no write permissions for certificates:
command: /commander/test-helper.sh && wrapper.sh
exit-code: 1
stderr:
contains:
- "can't create /root/sign.key: Permission denied"
- 'Timeout after 1s waiting on dependencies to become available: [file:///root/sign.key]'
config:
env:
signing_private_key: /root/sign.key
DOCKERIZE_TIMEOUT: 1s
#certificate creation in container: # currently does not work because of read-only container
# command: /commander/test-helper.sh && wrapper.sh
# stderr:
# contains:
# - "setup: creating new RSA private key at"
# not-contains:
# - "Timeout after 360s waiting on dependencies to become available:"
# config:
# env:
# signing_private_key: /tmp/sign.key
# encryption_secret_key: /tmp/secret.key
config:
env:
PATH: ${PATH}
eckey: ${eckey}
allow_client_guests: ${allow_client_guests}
ecparam: ${ecparam}
signing_private_key: ${signing_private_key}
KONNECT_BACKEND: ${KONNECT_BACKEND}
FQDN: ${FQDN}
identifier_registration_conf: ${identifier_registration_conf}
encryption_secret_key: ${encryption_secret_key}
identifier_scopes_conf: ${identifier_scopes_conf}
allow_dynamic_client_registration: ${allow_dynamic_client_registration}
DEBUG: ${DEBUG}
LANG: ${LANG}