consul/test/integration/connect/envoy/case-multidc-rsa-ca/primary/verify.bats

#!/usr/bin/env bats

load helpers

@test "s1 proxy is running correct version" {
  assert_envoy_version 19000
}

@test "s1 proxy admin is up on :19000" {
  retry_default curl -f -s localhost:19000/stats -o /dev/null
}

@test "s1 proxy listener should be up and have right cert" {
  assert_proxy_presents_cert_uri localhost:21000 s1
}

@test "s1 upstream should have healthy endpoints for s2" {
  assert_upstream_has_endpoints_in_status 127.0.0.1:19000 s2.default.secondary HEALTHY 1
}

@test "s1 upstream should be able to connect to s2" {
  run retry_default curl -s -f -d hello localhost:5000
  [ "$status" -eq 0 ]
  [ "$output" = "hello" ]
}

@test "s1 upstream made 1 connection" {
  assert_envoy_metric_at_least 127.0.0.1:19000 "cluster.s2.default.secondary.*cx_total" 1
}

@test "ca key should be RSA" {
  run retry_default curl -f -s 127.0.0.1:8500/v1/connect/ca/roots

  echo "$status"
  echo "OUTPUT: $output"

  [ "$status" -eq 0 ]

  KEY_TYPE=$(echo "$output" | jq -r '.Roots[0].PrivateKeyType')
  echo "KEY_TYPE: $KEY_TYPE"

  [ "$KEY_TYPE" == "rsa" ]
}