opsx
f3733f0bfc
- 品牌: Go 模块/数据文件/二进制/构建部署资产全部 opsx→lokistack;前端 localStorage 命名空间迁移(读旧写新,含按用户 id 前缀迁移);修复 nginx upstream 与 Makefile 引用已改名服务的断裂 - i18n: react-i18next 落地,common + 11 个页面域命名空间全站中英(菜单/顶栏/登录/列表页/表单/确认弹窗/状态徽章);设置页语言即时切换;修复词典自注册导致的循环导入白屏 - 用户管理: 批量删除(POST /users/batch-delete,不删自己/最后管理员,部分失败不阻断)+ 行复选/全选/批量工具条 - 主题: 浅色侧栏(中性灰激活态)、四态模式(浅色/深色/跟随系统/定时切换,按时区判定)、顶栏太阳月亮二态、设置页紧凑分段选择器 - UI: 登录记住用户名、CardActionButton 统一五页卡片操作钮、shadcn Badge 替换手写徽章、语义色修正 - 清理: 移除主机 Web 终端(前后端)、k8s-helm/Helm 遗留代码与字段、README 重写精简 - 修复: 侧栏与日志告警 order 重复、路由标题 i18n key 未翻译、词典双逗号等
57 lines
2.0 KiB
Go
57 lines
2.0 KiB
Go
package services
|
|
|
|
import (
|
|
"lokistack/models"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestAuthorizedLogQuery(t *testing.T) {
|
|
src := &models.LogSource{Access: []models.LogSourceAccess{{UserID: 7, Labels: map[string]string{"namespace": "prod", "pod": "loki-0"}}}}
|
|
if _, err := AuthorizedLogQuery(src, 8, false, `{app="api"}`); err == nil {
|
|
t.Fatal("ungranted user queried source")
|
|
}
|
|
q, err := AuthorizedLogQuery(src, 7, false, `{app="api"} |= "error"`)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, part := range []string{`app="api"`, `namespace="prod"`, `pod="loki-0"`, `|= "error"`} {
|
|
if !strings.Contains(q, part) {
|
|
t.Fatalf("missing %q in %q", part, q)
|
|
}
|
|
}
|
|
if _, err := AuthorizedLogQuery(src, 7, false, `sum(count_over_time({app="api"}[1m]))`); err == nil {
|
|
t.Fatal("metric query bypassed stream restriction")
|
|
}
|
|
if _, err := AuthorizedLogQuery(src, 7, false, `{app="api"} or {app="other"}`); err == nil {
|
|
t.Fatal("second selector bypassed stream restriction")
|
|
}
|
|
}
|
|
|
|
func TestPolicyGroupAccess(t *testing.T) {
|
|
groups := []models.LogPolicyGroup{{SourceID: 2, Labels: map[string]string{"namespace": "log", "app": "api"}, UserIDs: []uint{7, 8}}}
|
|
if got := policyGroupAccess(groups, 2, 8); got == nil || got.Labels["app"] != "api" {
|
|
t.Fatal("group member should inherit exact label scope")
|
|
}
|
|
if got := policyGroupAccess(groups, 3, 8); got != nil {
|
|
t.Fatal("group must not grant access to another source")
|
|
}
|
|
if got := policyGroupAccess(groups, 2, 9); got != nil {
|
|
t.Fatal("nonmember gained access")
|
|
}
|
|
}
|
|
|
|
func TestContextLogSelectorIgnoresDetectedLevel(t *testing.T) {
|
|
selector, err := ContextLogSelector(map[string]string{
|
|
"cluster": "demo-prod", "namespace": "monitor", "app": "consul",
|
|
"pod": "consul-0", "container": "consul", "detected_level": "info",
|
|
"filename": "/var/log/pods/consul/1.log",
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if selector != `{cluster="demo-prod",namespace="monitor",app="consul",pod="consul-0",container="consul",filename="/var/log/pods/consul/1.log"}` {
|
|
t.Fatalf("unexpected context selector: %s", selector)
|
|
}
|
|
}
|