bschuchardt commented on a change in pull request #4959: URL: https://github.com/apache/geode/pull/4959#discussion_r412381622
########## File path: geode-assembly/src/acceptanceTest/java/org/apache/geode/client/sni/ClientSNIDropProxyAcceptanceTest.java ########## @@ -0,0 +1,197 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one or more contributor license + * agreements. See the NOTICE file distributed with this work for additional information regarding + * copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance with the License. You may obtain a + * copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software distributed under the License + * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express + * or implied. See the License for the specific language governing permissions and limitations under + * the License. + */ +package org.apache.geode.client.sni; + +import static com.palantir.docker.compose.execution.DockerComposeExecArgument.arguments; +import static com.palantir.docker.compose.execution.DockerComposeExecOption.options; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_ENABLED_COMPONENTS; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_ENDPOINT_IDENTIFICATION_ENABLED; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_KEYSTORE_TYPE; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_REQUIRE_AUTHENTICATION; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_TRUSTSTORE; +import static org.apache.geode.distributed.ConfigurationProperties.SSL_TRUSTSTORE_PASSWORD; +import static org.apache.geode.test.awaitility.GeodeAwaitility.await; +import static org.apache.geode.test.util.ResourceUtils.createTempFileFromResource; +import static org.assertj.core.api.Assertions.assertThat; +import static org.assertj.core.api.Assertions.assertThatThrownBy; + +import java.io.IOException; +import java.net.URL; +import java.util.Properties; + +import com.palantir.docker.compose.DockerComposeRule; +import com.palantir.docker.compose.execution.DockerComposeRunArgument; +import com.palantir.docker.compose.execution.DockerComposeRunOption; +import org.junit.After; +import org.junit.Before; +import org.junit.ClassRule; +import org.junit.Rule; +import org.junit.Test; +import org.junit.rules.TestRule; + +import org.apache.geode.cache.Region; +import org.apache.geode.cache.client.ClientCache; +import org.apache.geode.cache.client.ClientCacheFactory; +import org.apache.geode.cache.client.ClientRegionShortcut; +import org.apache.geode.cache.client.NoAvailableLocatorsException; +import org.apache.geode.cache.client.proxy.ProxySocketFactories; +import org.apache.geode.test.junit.rules.IgnoreOnWindowsRule; + +public class ClientSNIDropProxyAcceptanceTest { + + private static final URL DOCKER_COMPOSE_PATH = + ClientSNIDropProxyAcceptanceTest.class.getResource("docker-compose.yml"); + + // Docker compose does not work on windows in CI. Ignore this test on windows + // Using a RuleChain to make sure we ignore the test before the rule comes into play + @ClassRule + public static TestRule ignoreOnWindowsRule = new IgnoreOnWindowsRule(); + + @Rule + public DockerComposeRule docker = DockerComposeRule.builder() + .file(DOCKER_COMPOSE_PATH.getPath()) + .build(); + + private ClientCache cache; + + private String trustStorePath; + private int proxyPort; + + @Before + public void before() throws IOException, InterruptedException { + trustStorePath = + createTempFileFromResource(ClientSNIDropProxyAcceptanceTest.class, + "geode-config/truststore.jks") + .getAbsolutePath(); + docker.exec(options("-T"), "geode", + arguments("gfsh", "run", "--file=/geode/scripts/geode-starter.gfsh")); + } + + @After + public void after() { + ensureCacheClosed(); + } + + @Test + public void performSimpleOperationsDropSNIProxy() + throws IOException, + InterruptedException { + final Region<String, Integer> region = getRegion(); + + region.put("Roy Hobbs", 9); + assertThat(region.get("Roy Hobbs")).isEqualTo(9); + + stopProxy(); + + assertThatThrownBy(() -> region.get("Roy Hobbs")) + .isInstanceOf(NoAvailableLocatorsException.class) + .hasMessageContaining("Unable to connect to any locators in the list"); + + + restartProxy(); + + await().untilAsserted(() -> assertThat(region.get("Roy Hobbs")).isEqualTo(9)); + + region.put("Bennie Rodriquez", 30); + assertThat(region.get("Bennie Rodriquez")).isEqualTo(30); + + region.put("Jake Taylor", 7); + region.put("Crash Davis", 8); + + region.put("Ricky Vaughn", 99); + region.put("Ebbie Calvin LaLoosh", 37); + + } + + private void stopProxy() throws IOException, InterruptedException { + docker.containers() + .container("haproxy") + .stop(); + } + + private void restartProxy() throws IOException, InterruptedException { + restartProxyOnPreviousPort(); + // Leave this commented here in case you need it for troubleshooting + // restartProxyOnDockerComposePort(); + } + + /** + * Use this variant to (re)start the container on whatever port(s) is specified in + * docker-compose.yml. Usually that would look something like: + * + * ports: + * - "15443:15443" + * + * Leave this unused method here for troubleshooting. + */ + private void restartProxyOnDockerComposePort() throws IOException, InterruptedException { + docker.containers() + .container("haproxy") + .start(); + } + + /** + * Use this variant to (re)start the container whatever host port it was bound to before + * it was stopped. Usually you'll want the ports spec in docker-compose.yml to look like + * this when using this method (allowing Docker to initially choose a random host port + * to bind to): + * + * ports: + * - "15443" + */ + private void restartProxyOnPreviousPort() throws IOException, InterruptedException { + docker.run( Review comment: It would be nice to have a comment describing what the string.format() arguments are about. Otherwise someone working on this in the future will have to do some digging to figure it out. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
