Juan Fernandez
d109d3954b
Resolves #41338 A fleetd-base.pkg built with `fleetctl package --use-system-configuration` shipped an empty /opt/orbit/secret.txt. During ABM enrollment, before the configuration profile was available, orbit read that empty file as an empty enroll secret, producing confusing logs.
31 lines
1022 B
Go
31 lines
1022 B
Go
package packaging
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/fleetdm/fleet/v4/orbit/pkg/constant"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestWriteMacOSSecret(t *testing.T) {
|
|
t.Run("skips writing when enroll secret is empty", func(t *testing.T) {
|
|
// With --use-system-configuration the enroll secret is empty and is
|
|
// resolved at runtime; writing an empty secret.txt produces confusing
|
|
// keystore errors during ABM enrollment.
|
|
orbitRoot := t.TempDir()
|
|
require.NoError(t, writeMacOSSecret(Options{EnrollSecret: ""}, orbitRoot))
|
|
require.NoFileExists(t, filepath.Join(orbitRoot, constant.OsqueryEnrollSecretFileName))
|
|
})
|
|
|
|
t.Run("writes the secret when present", func(t *testing.T) {
|
|
orbitRoot := t.TempDir()
|
|
require.NoError(t, writeMacOSSecret(Options{EnrollSecret: "mysecret"}, orbitRoot))
|
|
path := filepath.Join(orbitRoot, constant.OsqueryEnrollSecretFileName)
|
|
contents, err := os.ReadFile(path)
|
|
require.NoError(t, err)
|
|
require.Equal(t, "mysecret", string(contents))
|
|
})
|
|
}
|