Examples with InstanceConfirmation com.yahoo.athenz.instance.provider.InstanceConfirmation used on opensource projects

Example 16 with InstanceConfirmation

use of com.yahoo.athenz.instance.provider.InstanceConfirmation in project athenz by yahoo.

the class InstanceAWSProviderTest method testConfirmInstanceServiceMismatch.

@Test
public void testConfirmInstanceServiceMismatch() {
    MockInstanceAWSProvider provider = new MockInstanceAWSProvider();
    System.setProperty(InstanceAWSProvider.AWS_PROP_PUBLIC_CERT, "src/test/resources/aws_public.cert");
    provider.initialize("provider", "com.yahoo.athenz.instance.provider.impl.InstanceAWSProvider", null);
    InstanceConfirmation confirmation = new InstanceConfirmation().setAttestationData("{\"document\": \"document\",\"signature\": \"signature\",\"role\": \"athenz2.service\"}").setDomain("athenz").setProvider("provider").setService("service");
    HashMap<String, String> attributes = new HashMap<>();
    attributes.put("cloudAccount", "1234");
    confirmation.setAttributes(attributes);
    try {
        provider.confirmInstance(confirmation);
        fail();
    } catch (ResourceException ex) {
    }
}

Example 17 with InstanceConfirmation

use of com.yahoo.athenz.instance.provider.InstanceConfirmation in project athenz by yahoo.

the class InstanceAWSProviderTest method testRefreshInstanceInvalidVerifyIdentity.

@Test
public void testRefreshInstanceInvalidVerifyIdentity() {
    MockInstanceAWSProvider provider = new MockInstanceAWSProvider();
    System.setProperty(InstanceAWSProvider.AWS_PROP_PUBLIC_CERT, "src/test/resources/aws_public.cert");
    provider.initialize("provider", "com.yahoo.athenz.instance.provider.impl.InstanceAWSProvider", null);
    provider.setIdentityResult(false);
    String bootTime = Timestamp.fromMillis(System.currentTimeMillis() - 100).toString();
    InstanceConfirmation confirmation = new InstanceConfirmation().setAttestationData("{\"document\": \"{\\\"accountId\\\": \\\"1234\\\",\\\"pendingTime\\\": \\\"" + bootTime + "\\\",\\\"region\\\": \\\"us-west-2\\\",\\\"instanceId\\\": \\\"i-1234\\\"}\"," + "\"signature\": \"signature\",\"role\": \"athenz.service\"}").setDomain("athenz").setProvider("athenz.aws.us-west-2").setService("service");
    HashMap<String, String> attributes = new HashMap<>();
    attributes.put("cloudAccount", "1234");
    attributes.put("sanDNS", "service.athenz.athenz.cloud,i-1234.instanceid.athenz.athenz.cloud");
    confirmation.setAttributes(attributes);
    try {
        provider.refreshInstance(confirmation);
        fail();
    } catch (ResourceException ex) {
    }
}

Example 18 with InstanceConfirmation

use of com.yahoo.athenz.instance.provider.InstanceConfirmation in project athenz by yahoo.

the class InstanceAWSProviderTest method testConfirmInstanceEmptyDocument.

@Test
public void testConfirmInstanceEmptyDocument() {
    System.setProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX, "athenz.cloud");
    MockInstanceAWSProvider provider = new MockInstanceAWSProvider();
    System.setProperty(InstanceAWSProvider.AWS_PROP_PUBLIC_CERT, "src/test/resources/aws_public.cert");
    provider.initialize("provider", "com.yahoo.athenz.instance.provider.impl.InstanceAWSProvider", null);
    InstanceConfirmation confirmation = new InstanceConfirmation().setAttestationData("{\"document\": \"\",\"signature\": \"signature\",\"role\": \"athenz.service\"}").setDomain("athenz").setProvider("provider").setService("service");
    HashMap<String, String> attributes = new HashMap<>();
    attributes.put("cloudAccount", "1234");
    attributes.put("sanDNS", "service.athenz.athenz.cloud,i-1234.instanceid.athenz.athenz.cloud");
    confirmation.setAttributes(attributes);
    try {
        provider.confirmInstance(confirmation);
        fail();
    } catch (ResourceException ex) {
        assertEquals(ex.getCode(), 403);
    }
    System.clearProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX);
}

Example 19 with InstanceConfirmation

use of com.yahoo.athenz.instance.provider.InstanceConfirmation in project athenz by yahoo.

the class InstanceAWSLambdaProviderTest method testConfirmInstanceNullDocument.

@Test
public void testConfirmInstanceNullDocument() {
    System.setProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX, "athenz.cloud");
    MockInstanceAWSLambdaProvider provider = new MockInstanceAWSLambdaProvider();
    System.setProperty(InstanceAWSProvider.AWS_PROP_PUBLIC_CERT, "src/test/resources/aws_public.cert");
    provider.initialize("provider", "com.yahoo.athenz.instance.provider.impl.InstanceAWSLambdaProvider", null);
    InstanceConfirmation confirmation = new InstanceConfirmation().setAttestationData("{\"signature\": \"signature\",\"role\": \"athenz.service\"}").setDomain("athenz").setProvider("provider").setService("service");
    HashMap<String, String> attributes = new HashMap<>();
    attributes.put("cloudAccount", "1234");
    attributes.put("sanDNS", "service.athenz.athenz.cloud,i-1234.instanceid.athenz.athenz.cloud");
    confirmation.setAttributes(attributes);
    InstanceConfirmation result = provider.confirmInstance(confirmation);
    assertEquals(result.getAttributes().get("certUsage"), "client");
    assertEquals(result.getDomain(), "athenz");
    System.clearProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX);
}

Example 20 with InstanceConfirmation

use of com.yahoo.athenz.instance.provider.InstanceConfirmation in project athenz by yahoo.

the class InstanceAWSLambdaProviderTest method testConfirmInstanceEmptyDocument.

@Test
public void testConfirmInstanceEmptyDocument() {
    System.setProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX, "athenz.cloud");
    MockInstanceAWSLambdaProvider provider = new MockInstanceAWSLambdaProvider();
    System.setProperty(InstanceAWSProvider.AWS_PROP_PUBLIC_CERT, "src/test/resources/aws_public.cert");
    provider.initialize("provider", "com.yahoo.athenz.instance.provider.impl.InstanceAWSLambdaProvider", null);
    InstanceConfirmation confirmation = new InstanceConfirmation().setAttestationData("{\"document\": \"\",\"signature\": \"signature\",\"role\": \"athenz.service\"}").setDomain("athenz").setProvider("provider").setService("service");
    HashMap<String, String> attributes = new HashMap<>();
    attributes.put("cloudAccount", "1234");
    attributes.put("sanDNS", "service.athenz.athenz.cloud,i-1234.instanceid.athenz.athenz.cloud");
    confirmation.setAttributes(attributes);
    InstanceConfirmation result = provider.confirmInstance(confirmation);
    assertEquals(result.getAttributes().get("certUsage"), "client");
    assertEquals(result.getDomain(), "athenz");
    System.clearProperty(InstanceAWSProvider.AWS_PROP_DNS_SUFFIX);
}