yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

user-password: migrate to vars

Browse Source
This commit is contained in:
Jörg Thalheim
2025-04-08 08:45:51 +02:00
parent a8e73f0260
commit f24df0e33b
3 changed files with 14 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
pkgs/clan-cli/tests/test_secrets_generate.py
View File

@@ -81,9 +81,6 @@ def test_generate_secret(
Machine(name="vm2", flake=Flake(str(test_flake_with_core.path)))
)
# Should not exist clan facts generate
assert not store2.exists("", "password")
assert not store2.exists("", "password-hash")
# clan vars generate
# TODO: Test vars
# varsStore = VarsSecretStore(
@@ -101,8 +98,6 @@ def test_generate_secret(
# set_prompts(str(test_flake_with_core.path), "vm2", [password_update])
# assert varsStore.exists(generator, "root-password")
assert store2.exists("", "user-password")
assert store2.exists("", "user-password-hash")
assert store2.exists("", "age.key")
assert store2.exists("", "zerotier-identity-secret")
@@ -113,11 +108,3 @@ def test_generate_secret(
age_secret = store2.get("", "age.key").decode()
assert age_secret.isprintable()
assert is_valid_age_key(age_secret)
# Assert that user-password is valid
pwd_secret = store2.get("", "user-password").decode()
assert pwd_secret.isprintable()
assert pwd_secret.isascii()
pwd_hash = store2.get("", "user-password-hash").decode()
assert pwd_hash.isprintable()
assert pwd_hash.isascii()

14
pkgs/clan-cli/tests/test_secrets_password_store.py
View File

@@ -85,18 +85,4 @@ def test_upload_secret(
assert zerotier_identity_secret.exists()
assert store.exists("", "zerotier-identity-secret")
assert store.exists("", "user-password")
assert store.exists("", "user-password-hash")
assert store.exists("", "zerotier-identity-secret")
# Since root-password uses Vars they should not be uploaded / generated by the facts
assert not store.exists("", "password")
assert not store.exists("", "password-hash")
# Assert that user-password is valid
pwd_secret = store.get("", "user-password").decode()
assert pwd_secret.isprintable()
assert pwd_secret.isascii()
pwd_hash = store.get("", "user-password-hash").decode()
assert pwd_hash.isprintable()
assert pwd_hash.isascii()