view release on metacpan or  search on metacpan

t/04-ssl-options.t  view on Meta::CPAN

use strict;
use warnings;
use Test::More;

use IO::Socket::SSL;
use Net::Async::Kubernetes;
use Kubernetes::REST::Server;
use Kubernetes::REST::AuthToken;

# ============================================================================
# SSL options with full config
# ============================================================================

subtest 'ssl options with all certs' => sub {
    my $kube = Net::Async::Kubernetes->new(
        server => Kubernetes::REST::Server->new(
            endpoint          => 'https://k8s.local:6443',
            ssl_verify_server => 1,
            ssl_ca_file       => '/path/to/ca.crt',
            ssl_cert_file     => '/path/to/client.crt',
            ssl_key_file      => '/path/to/client.key',
        ),
        credentials => Kubernetes::REST::AuthToken->new(token => 'test'),
    );

    my @opts = $kube->_ssl_options;
    my %opts = @opts;

    is($opts{SSL_verify_mode}, SSL_VERIFY_PEER, 'SSL_verify_mode is VERIFY_PEER');
    is($opts{SSL_ca_file}, '/path/to/ca.crt', 'SSL_ca_file passed through');
    is($opts{SSL_cert_file}, '/path/to/client.crt', 'SSL_cert_file passed through');
    is($opts{SSL_key_file}, '/path/to/client.key', 'SSL_key_file passed through');
};

# ============================================================================
# SSL with verify disabled
# ============================================================================

subtest 'ssl options with verify disabled' => sub {
    my $kube = Net::Async::Kubernetes->new(
        server => Kubernetes::REST::Server->new(
            endpoint          => 'https://k8s.local:6443',
            ssl_verify_server => 0,
        ),
        credentials => Kubernetes::REST::AuthToken->new(token => 'test'),
    );

    my %opts = $kube->_ssl_options;
    is($opts{SSL_verify_mode}, SSL_VERIFY_NONE, 'SSL_verify_mode is VERIFY_NONE');
    ok(!exists $opts{SSL_ca_file}, 'no SSL_ca_file when not set');
    ok(!exists $opts{SSL_cert_file}, 'no SSL_cert_file when not set');
    ok(!exists $opts{SSL_key_file}, 'no SSL_key_file when not set');
};

# ============================================================================
# SSL with only CA cert
# ============================================================================

subtest 'ssl options with only CA cert' => sub {
    my $kube = Net::Async::Kubernetes->new(
        server => Kubernetes::REST::Server->new(
            endpoint          => 'https://k8s.local:6443',
            ssl_verify_server => 1,
            ssl_ca_file       => '/path/to/ca.crt',
        ),