Makefile

# Targets that can be run from host machine

# following lines sets the TEST_BASE_ARN to the value reported by AWS CLI if it is not
# already set as an environment variable
TEST_BASE_ARN?=$(export AWS_PAGER="" && aws sts get-caller-identity --query Arn --output text)

# Starts a bash shell in the dev environment
dev:
	make run-in-docker CMD="bash"
dev-env: dc-build
	$(docker_env) docker-compose up
dc-build: ssl/rootCA.key
	$(docker_env) docker-compose -f docker-compose.yml -f docker-compose.test.yml build
test: dc-build
	make run-in-docker CMD="make run-testsuite"

# PARAMETERS USED FOR TESTS
TEST_DBADDRS=dbmd5:5432 dbsha256:5432 dbmysqlsha1:3306
TEST_DB=db
TEST_DBPORT=5432
TEST_DBPASS=password
TEST_DBUSER=bob


### Anything below here is implementation details ###

# This target just saves a bit of typing
# It takes argument CMD and runs it in the tests service
run-in-docker:
	$(docker_env) $(testsuite_env) docker-compose $(dc_files) run tests $(CMD)

dc_files=-f docker-compose.yml -f docker-compose.test.yml
# Enable Buildkit in docker commands
docker_env=COMPOSE_DOCKER_CLI_BUILD=1 DOCKER_BUILDKIT=1

vault_secret = { $\
"password": "$(TEST_DBPASS)", $\
"iam_arns": [ $\
	"${TEST_ASSUMABLE_ARN}", $\
	"${TEST_BASE_ARN}" $\
] $\
}
testsuite_env = TEST_ASSUMABLE_ARN=$(TEST_ASSUMABLE_ARN) TEST_BASE_ARN=$(value TEST_BASE_ARN) $\
		PSYCOPG2_TESTDB=$(TEST_DB) PSYCOPG2_TESTDB_ADDR=$(TEST_DBADDR) $\
		PSYCOPG2_TESTDB_PORT=$(TEST_DBPORT) PSYCOPG2_TESTDB_USER=$(TEST_DBUSER)


# Generates self-signed certificates that can be used to run Postgres DBs with SSL
ssl/rootCA.key:
	cd ssl && ./gen_cert.sh

# Following targets are called by the `tests` Docker compose service
enable-vault-path:
	vault secrets enable -path=approzium -version=1 kv | true
seed-vault-addr:  # call this with "make seed-vault-addr ADDR=foo"
	echo '{"$(TEST_DBUSER)": $(vault_secret)}' | \
		vault write approzium/$(ADDR) -
seed-vault-all-addrs:
	for ADDR in $(TEST_DBADDRS); do \
		make seed-vault-addr ADDR=$$ADDR; \
	done
# ASM uses @ to separate host and port, so replace : with @
seed-asm-addr:
	AWS_PAGER="" aws secretsmanager create-secret --name approzium/$(shell echo $(ADDR) | sed "s/:/@/g") \
		--secret-string '{"$(TEST_DBUSER)": $(vault_secret)}' || true
	AWS_PAGER="" aws secretsmanager put-secret-value --secret-id approzium/$(shell echo $(ADDR) | sed "s/:/@/g") \
		--secret-string '{"$(TEST_DBUSER)": $(vault_secret)}'

seed-asm-all-addrs:
	for ADDR in $(TEST_DBADDRS); do \
		make seed-asm-addr ADDR=$$ADDR; \
	done

run-testsuite: run-gotests run-pythontests

run-gotests: enable-vault-path seed-vault-all-addrs seed-asm-all-addrs
	cd authenticator && CGO_ENABLED=1 go test -v -race ./...
	cd sdk/go/approzium && CGO_ENABLED=1 go test -v -race ./...

run-pythontests: enable-vault-path seed-vault-all-addrs seed-asm-all-addrs
	cd sdk/python && poetry run pytest --workers auto