EnvoyServerProtoDataTest.java

/*
 * Copyright 2020 The gRPC Authors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package io.grpc.xds;

import static com.google.common.truth.Truth.assertThat;

import com.google.protobuf.Any;
import com.google.protobuf.UInt32Value;
import io.envoyproxy.envoy.api.v2.auth.CommonTlsContext;
import io.envoyproxy.envoy.api.v2.auth.DownstreamTlsContext;
import io.envoyproxy.envoy.api.v2.auth.SdsSecretConfig;
import io.envoyproxy.envoy.api.v2.core.CidrRange;
import io.envoyproxy.envoy.api.v2.core.SocketAddress;
import io.envoyproxy.envoy.api.v2.listener.Filter;
import io.envoyproxy.envoy.api.v2.listener.FilterChain;
import io.envoyproxy.envoy.api.v2.listener.FilterChainMatch;
import io.grpc.xds.EnvoyServerProtoData.Listener;
import io.grpc.xds.internal.sds.CommonTlsContextTestsUtil;
import java.util.List;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.junit.runners.JUnit4;

/**
 * Unit tests for {@link EnvoyServerProtoData}.
 */
@RunWith(JUnit4.class)
public class EnvoyServerProtoDataTest {

  @Test
  public void listener_convertFromListenerProto() {
    io.envoyproxy.envoy.api.v2.core.Address address =
        io.envoyproxy.envoy.api.v2.core.Address.newBuilder()
            .setSocketAddress(SocketAddress.newBuilder()
                .setPortValue(8000)
                .setAddress("10.2.1.34")
                .build())
            .build();
    io.envoyproxy.envoy.api.v2.Listener listener =
        io.envoyproxy.envoy.api.v2.Listener.newBuilder()
            .setName("8000")
            .setAddress(address)
            .addFilterChains(createOutFilter())
            .addFilterChains(createInFilter())
            .build();

    Listener xdsListener = Listener.fromEnvoyProtoListener(listener);
    assertThat(xdsListener.getName()).isEqualTo("8000");
    assertThat(xdsListener.getAddress()).isEqualTo("10.2.1.34:8000");
    List<EnvoyServerProtoData.FilterChain> filterChains = xdsListener.getFilterChains();
    assertThat(filterChains).isNotNull();
    assertThat(filterChains.size()).isEqualTo(2);
    EnvoyServerProtoData.FilterChain outFilter = filterChains.get(0);
    assertThat(outFilter).isNotNull();
    EnvoyServerProtoData.FilterChainMatch outFilterChainMatch = outFilter.getFilterChainMatch();
    assertThat(outFilterChainMatch).isNotNull();
    assertThat(outFilterChainMatch.getDestinationPort()).isEqualTo(8000);
    assertThat(outFilterChainMatch.getApplicationProtocols()).isEmpty();
    assertThat(outFilterChainMatch.getPrefixRanges()).isEmpty();
    assertThat(outFilter.getDownstreamTlsContext())
        .isEqualTo(DownstreamTlsContext.getDefaultInstance());

    EnvoyServerProtoData.FilterChain inFilter = filterChains.get(1);
    assertThat(inFilter).isNotNull();
    EnvoyServerProtoData.FilterChainMatch inFilterChainMatch = inFilter.getFilterChainMatch();
    assertThat(inFilterChainMatch).isNotNull();
    assertThat(inFilterChainMatch.getDestinationPort()).isEqualTo(8000);
    assertThat(inFilterChainMatch.getApplicationProtocols()).containsExactly("managed-mtls");
    assertThat(inFilterChainMatch.getPrefixRanges()).containsExactly(
        new EnvoyServerProtoData.CidrRange("10.20.0.15", 32));
    DownstreamTlsContext inFilterTlsContext = inFilter.getDownstreamTlsContext();
    assertThat(inFilterTlsContext).isNotNull();
    CommonTlsContext commonTlsContext = inFilterTlsContext.getCommonTlsContext();
    assertThat(commonTlsContext).isNotNull();
    List<SdsSecretConfig> tlsCertSdsConfigs = commonTlsContext
        .getTlsCertificateSdsSecretConfigsList();
    assertThat(tlsCertSdsConfigs).isNotNull();
    assertThat(tlsCertSdsConfigs).hasSize(1);
    assertThat(tlsCertSdsConfigs.get(0).getName()).isEqualTo("google-sds-config-default");
  }

  private static FilterChain createOutFilter() {
    FilterChain filterChain =
        FilterChain.newBuilder()
            .setFilterChainMatch(
                FilterChainMatch.newBuilder()
                    .setDestinationPort(UInt32Value.newBuilder().setValue(8000).build())
                    .build())
            .addFilters(Filter.newBuilder()
                .setName("envoy.http_connection_manager")
                .build())
            .build();
    return filterChain;
  }

  @SuppressWarnings("deprecation")
  private static FilterChain createInFilter() {
    FilterChain filterChain =
        FilterChain.newBuilder()
            .setFilterChainMatch(
                FilterChainMatch.newBuilder()
                    .setDestinationPort(UInt32Value.newBuilder().setValue(8000)
                        .build())
                    .addPrefixRanges(CidrRange.newBuilder()
                        .setAddressPrefix("10.20.0.15")
                        .setPrefixLen(UInt32Value.newBuilder().setValue(32)
                            .build()).build())
                    .addApplicationProtocols("managed-mtls")
                    .build())
            .setTlsContext(CommonTlsContextTestsUtil.buildTestDownstreamTlsContext())
            .addFilters(Filter.newBuilder()
                .setName("envoy.http_connection_manager")
                .setTypedConfig(Any.newBuilder()
                    .setTypeUrl(
                        "type.googleapis.com/envoy.config.filter.network.http_connection_manager"
                            + ".v2.HttpConnectionManager"))
                .build())
            .build();
    return filterChain;
  }
}