From a40ef14cf62066f609766ca48d91a587c45f200e Mon Sep 17 00:00:00 2001
From: Abin Simon <mail@meain.io>
Date: Tue, 14 Jun 2022 18:23:33 +0530
Subject: [PATCH] Add tests for relay audit logs

---
 pkg/service/relay_audit_query_test.go | 145 ++++++++++++++++++++++++++
 1 file changed, 145 insertions(+)
 create mode 100644 pkg/service/relay_audit_query_test.go

diff --git a/pkg/service/relay_audit_query_test.go b/pkg/service/relay_audit_query_test.go
new file mode 100644
index 0000000..85aad70
--- /dev/null
+++ b/pkg/service/relay_audit_query_test.go
@@ -0,0 +1,145 @@
+package service
+
+import (
+	"encoding/json"
+	"strings"
+	"testing"
+
+	v1 "github.com/paralus/paralus/proto/rpc/audit"
+	v3 "github.com/paralus/paralus/proto/types/commonpb/v3"
+)
+
+type rmd struct {
+	Source []string `json:"_source"`
+	Aggs   struct {
+		GroupByCluster struct {
+			Aggs struct {
+				GroupByNamespace struct {
+					Terms struct {
+						Field string `json:"field"`
+						Size  int    `json:"size"`
+					} `json:"terms"`
+				} `json:"group_by_namespace"`
+				GroupByUsername struct {
+					Terms struct {
+						Field string `json:"field"`
+						Size  int    `json:"size"`
+					} `json:"terms"`
+				} `json:"group_by_username"`
+			} `json:"aggs"`
+			Terms struct {
+				Field string `json:"field"`
+				Size  int    `json:"size"`
+			} `json:"terms"`
+		} `json:"group_by_cluster"`
+		GroupByKind struct {
+			Terms struct {
+				Field string `json:"field"`
+			} `json:"terms"`
+		} `json:"group_by_kind"`
+		GroupByMethod struct {
+			Terms struct {
+				Field string `json:"field"`
+			} `json:"terms"`
+		} `json:"group_by_method"`
+		GroupByNamespace struct {
+			Terms struct {
+				Field string `json:"field"`
+			} `json:"terms"`
+		} `json:"group_by_namespace"`
+		GroupByUsername struct {
+			Terms struct {
+				Field string `json:"field"`
+			} `json:"terms"`
+		} `json:"group_by_username"`
+	} `json:"aggs"`
+	Query struct {
+		Bool struct {
+			Filter struct {
+				Range struct {
+					JSONTs struct {
+						Gte string `json:"gte"`
+						Lt  string `json:"lt"`
+					} `json:"json.ts"`
+				} `json:"range"`
+			} `json:"filter"`
+			Must []struct {
+				Term struct {
+					JSONUn string `json:"json.un"`
+				} `json:"term,omitempty"`
+				Terms struct {
+					JSONProject []string `json:"json.project"`
+				} `json:"terms,omitempty"`
+				QueryString struct {
+					Query string `json:"query"`
+				} `json:"query_string,omitempty"`
+			} `json:"must"`
+		} `json:"bool"`
+	} `json:"query"`
+	Size int `json:"size"`
+	Sort struct {
+		JSONTs struct {
+			Order string `json:"order"`
+		} `json:"json.ts"`
+	} `json:"sort"`
+}
+
+func TestGetRelayAuditLogByProjectsSimple(t *testing.T) {
+	esq := &mockElasticSearchQuery{}
+	al := &RelayAuditService{relayQuery: esq}
+	req := v1.RelayAuditSearchRequest{
+		Filter: &v1.RelayAuditQueryFilter{
+			QueryString:   "query-string",
+			Projects:      []string{"project-one", "project-two"},
+			Timefrom:      "now-1h",
+			Type:          "fake-type",
+			User:          "fake-user",
+			Client:        "fake-client",
+			DashboardData: true,
+		},
+	}
+	_, err := al.GetRelayAuditByProjects(&req)
+	if err != nil {
+		t.Error("unable to get audit logs")
+	}
+	if len(esq.msg) != 1 {
+		t.Fatalf("incorrect number of searches; expected '%v', got '%v'", 1, len(esq.msg))
+	}
+	m := &rmd{}
+	err = json.Unmarshal(esq.msg[0].Bytes(), m)
+	if err != nil {
+		t.Fatal("unable to unmarshall es request")
+	}
+	expected := `{"_source":["json"],"aggs":{"group_by_cluster":{"aggs":{"group_by_namespace":{"terms":{"field":"json.ns","size":1000}},"group_by_username":{"terms":{"field":"json.un","size":1000}}},"terms":{"field":"json.cn","size":1000}},"group_by_kind":{"terms":{"field":"json.k"}},"group_by_method":{"terms":{"field":"json.m"}},"group_by_namespace":{"terms":{"field":"json.ns"}},"group_by_username":{"terms":{"field":"json.un"}}},"query":{"bool":{"filter":{"range":{"json.ts":{"gte":"now-1h","lt":"now"}}},"must":[{"term":{"json.un":"fake-user"}},{"terms":{"json.project":["project-one","project-two"]}},{"query_string":{"query":"query-string"}}]}},"size":0,"sort":{"json.ts":{"order":"desc"}}}`
+	if strings.TrimSpace(esq.msg[0].String()) != expected {
+		t.Errorf("incorrect es query; expected '%v', got '%v'", expected, strings.TrimSpace(esq.msg[0].String()))
+	}
+}
+
+func TestGetRelayAuditLogByProjectsNoProject(t *testing.T) {
+	esq := &mockElasticSearchQuery{}
+	al := &RelayAuditService{relayQuery: esq}
+	req := v1.RelayAuditSearchRequest{
+		Metadata: &v3.Metadata{UrlScope: "url/project"},
+		Filter: &v1.RelayAuditQueryFilter{
+			QueryString: "query-string",
+		},
+	}
+	_, err := al.GetRelayAudit(&req)
+	if err != nil {
+		t.Error("unable to get audit logs", err)
+	}
+	if len(esq.msg) != 1 {
+		t.Fatalf("incorrect number of searches; expected '%v', got '%v'", 1, len(esq.msg))
+	}
+	m := &rmd{}
+	err = json.Unmarshal(esq.msg[0].Bytes(), m)
+	if err != nil {
+		t.Fatal("unable to unmarshall es request")
+	}
+
+	expected := `{"_source":["json"],"aggs":{"group_by_cluster":{"terms":{"field":"json.cn"}},"group_by_kind":{"terms":{"field":"json.k"}},"group_by_method":{"terms":{"field":"json.m"}},"group_by_namespace":{"terms":{"field":"json.ns"}},"group_by_username":{"terms":{"field":"json.un"}}},"query":{"bool":{"must":[{"terms":{"json.project":["project"]}},{"query_string":{"query":"query-string"}}]}},"size":500,"sort":{"json.ts":{"order":"desc"}}}`
+	if strings.TrimSpace(esq.msg[0].String()) != expected {
+		t.Errorf("incorrect es query; expected '%v', got '%v'", expected, strings.TrimSpace(esq.msg[0].String()))
+	}
+}