Skip to content

Commit 8096fcc

Browse files
general-kroll-4-lifegeneral-kroll-4-life
committed
refined-sts-integration-test
1 parent 4c249a4 commit 8096fcc

2 files changed

Lines changed: 32 additions & 68 deletions

File tree

‎test/registry/src/aws/v0.1.0/services/pseudo_s3.yaml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -455,6 +455,37 @@ components:
455455
type: string
456456
type: object
457457
x-stackQL-resources:
458+
buckets_list_only:
459+
name: buckets_list_only
460+
id: aws.pseudo_s3.buckets_list_only
461+
x-cfn-schema-name: Bucket
462+
x-cfn-type-name: AWS::S3::Bucket
463+
x-identifiers:
464+
- BucketName
465+
x-type: cloud_control_view
466+
methods: {}
467+
sqlVerbs:
468+
insert: []
469+
delete: []
470+
update: []
471+
config:
472+
views:
473+
select:
474+
predicate: sqlDialect == "sqlite3"
475+
ddl: |-
476+
SELECT
477+
region,
478+
JSON_EXTRACT(Properties, '$.BucketName') as bucket_name
479+
FROM aws.cloud_control.resources WHERE data__TypeName = 'AWS::S3::Bucket'
480+
AND region = 'us-east-1'
481+
fallback:
482+
predicate: sqlDialect == "postgres"
483+
ddl: |-
484+
SELECT
485+
region,
486+
json_extract_path_text(Properties, 'BucketName') as bucket_name
487+
FROM aws.cloud_control.resources WHERE data__TypeName = 'AWS::S3::Bucket'
488+
AND region = 'us-east-1'
458489
s3_bucket_listing:
459490
name: s3_bucket_listing
460491
id: aws.pseudo_s3.s3_bucket_listing

‎test/robot/foreign-integration-traffic-lights/stackql_foreign_traffic_light_integration_from_cmd_line.robot‎

Lines changed: 1 addition & 68 deletions
Original file line numberDiff line numberDiff line change
@@ -9,37 +9,14 @@ Nop From Lib
99
${result} = Nop Cloud Integration Keyword
1010
Should Be Equal ${result} PASS
1111

12-
13-
AWS S3 Buckets Location Constraint
14-
Sleep 2s
15-
${awsRoleArn} = Get Environment Variable STACKQL_AUDIT_ROLE_ARN
16-
Should Not Be Empty ${awsRoleArn}
17-
${awsAuthCfg} = Catenate
18-
... { "aws": { "type":"aws_assume_role", "keyIDenvvar": "AWS_ACCESS_KEY_ID", "credentialsenvvar": "AWS_SECRET_ACCESS_KEY", "aws_role_arn": "${awsRoleArn}" } }
19-
${locactionConstraintQuery} = Catenate
20-
... select LocationConstraint from aws.s3.bucket_locations where region = 'ap-southeast-1' and Bucket = 'stackql-trial-bucket-01';
21-
${result} = Run Process
22-
... ${STACKQL_EXE}
23-
... \-\-auth
24-
... ${awsAuthCfg}
25-
... \-\-registry
26-
... { "url": "file://${REPOSITORY_ROOT}/test/registry", "localDocRoot": "${REPOSITORY_ROOT}/test/registry", "verifyConfig": { "nopVerify": true } }
27-
... exec
28-
... ${locactionConstraintQuery}
29-
... cwd=${REPOSITORY_ROOT}
30-
... stdout=${CURDIR}/tmp/AWS-S3-Buckets-Location-Constraint.tmp
31-
... stderr=${CURDIR}/tmp/AWS-S3-Buckets-Location-Constraint-stderr.tmp
32-
Should Be Equal As Integers ${result.rc} 0
33-
Should Contain ${result.stdout} ap\-southeast\-1
34-
3512
AWS S3 Buckets List
3613
Sleep 2s
3714
${awsRoleArn} = Get Environment Variable STACKQL_AUDIT_ROLE_ARN
3815
Should Not Be Empty ${awsRoleArn}
3916
${awsAuthCfg} = Catenate
4017
... { "aws": { "type":"aws_assume_role", "keyIDenvvar": "AWS_ACCESS_KEY_ID", "credentialsenvvar": "AWS_SECRET_ACCESS_KEY", "aws_role_arn": "${awsRoleArn}" } }
4118
${bucketsListQuery} = Catenate
42-
... select * from aws.s3.buckets where region = 'us-east-1' order by BucketArn desc;
19+
... select * from aws.pseudo_s3.buckets_list_only where region = 'ap-southeast-2';
4320
${result} = Run Process
4421
... ${STACKQL_EXE}
4522
... \-\-auth
@@ -53,47 +30,3 @@ AWS S3 Buckets List
5330
... stderr=${CURDIR}/tmp/AWS-S3-Buckets-List-stderr.tmp
5431
Should Be Equal As Integers ${result.rc} 0
5532
Should Contain ${result.stdout} stackql\-trial\-bucket\-02
56-
57-
AWS S3 Bucket Objects List
58-
Sleep 2s
59-
${awsRoleArn} = Get Environment Variable STACKQL_AUDIT_ROLE_ARN
60-
Should Not Be Empty ${awsRoleArn}
61-
${awsAuthCfg} = Catenate
62-
... { "aws": { "type":"aws_assume_role", "keyIDenvvar": "AWS_ACCESS_KEY_ID", "credentialsenvvar": "AWS_SECRET_ACCESS_KEY", "aws_role_arn": "${awsRoleArn}" } }
63-
${bucketObjectsListQuery} = Catenate
64-
... select * from aws.s3.objects where Bucket = 'stackql-trial-bucket-02' and region = 'ap-southeast-2';
65-
${result} = Run Process
66-
... ${STACKQL_EXE}
67-
... \-\-auth
68-
... ${awsAuthCfg}
69-
... \-\-registry
70-
... { "url": "file://${REPOSITORY_ROOT}/test/registry", "localDocRoot": "${REPOSITORY_ROOT}/test/registry", "verifyConfig": { "nopVerify": true } }
71-
... exec
72-
... ${bucketObjectsListQuery}
73-
... cwd=${REPOSITORY_ROOT}
74-
... stdout=${CURDIR}/tmp/AWS-S3-Bucket-Objects-List.tmp
75-
... stderr=${CURDIR}/tmp/AWS-S3-Bucket-Objects-List-stderr.tmp
76-
Should Be Equal As Integers ${result.rc} 0
77-
Should Contain ${result.stdout} docs/advanced
78-
79-
AWS S3 Bucket ABAC Works
80-
Sleep 2s
81-
${awsRoleArn} = Get Environment Variable STACKQL_AUDIT_ROLE_ARN
82-
Should Not Be Empty ${awsRoleArn}
83-
${awsAuthCfg} = Catenate
84-
... { "aws": { "type": "aws_assume_role", "keyIDenvvar": "AWS_ACCESS_KEY_ID", "credentialsenvvar": "AWS_SECRET_ACCESS_KEY", "aws_role_arn": "${awsRoleArn}" } }
85-
${bucketObjectsListQuery} = Catenate
86-
... select * from aws.s3.bucket_abac where Bucket = 'stackql-trial-bucket-02' and region = 'ap-southeast-2';
87-
${result} = Run Process
88-
... ${STACKQL_EXE}
89-
... \-\-auth
90-
... ${awsAuthCfg}
91-
... \-\-registry
92-
... { "url": "file://${REPOSITORY_ROOT}/test/registry", "localDocRoot": "${REPOSITORY_ROOT}/test/registry", "verifyConfig": { "nopVerify": true } }
93-
... exec
94-
... ${bucketObjectsListQuery}
95-
... cwd=${REPOSITORY_ROOT}
96-
... stdout=${CURDIR}/tmp/AWS-S3-Bucket-Objects-List.tmp
97-
... stderr=${CURDIR}/tmp/AWS-S3-Bucket-Objects-List-stderr.tmp
98-
Should Be Equal As Integers ${result.rc} 0
99-
Should Contain ${result.stdout} stackql\-trial\-bucket\-02

0 commit comments

Comments
 (0)