42 lines
1.6 KiB
Markdown
42 lines
1.6 KiB
Markdown
|
# Running Consul for Terraform Acceptance Tests
|
||
|
|
|
||
|
|
## TLS
|
||
|
|
|
||
|
|
Some of the acceptance tests for the `consul` provider use
|
||
|
|
TLS. To service these tests, a Consul server must be started
|
||
|
|
with HTTPS enabled with TLS certificates.
|
||
|
|
|
||
|
|
### Test fixtures
|
||
|
|
|
||
|
|
File | Description
|
||
|
|
--- | ---
|
||
|
|
`agent.json.example` | Configures the Consul agent to respond to HTTPS requests, and verifies the authenticity of HTTPS requests
|
||
|
|
`agentcert.pem` | A PEM-encoded certificate used by the Consul agent, valid only for 127.0.0.1 signed by `cacert.pem`, expires 2026
|
||
|
|
`agentkey.pem` | A PEM-encoded private key used by the Consul agent
|
||
|
|
`cacert.pem` | A PEM-encoded Certificate Authority, expires 2036
|
||
|
|
`usercert.pem` | A PEM-encoded certificate used by the Terraform acceptance tests, signed by `cacert.pem`, expires 2026
|
||
|
|
`userkey.pem` | A PEM-encoded private key used by the Terraform acceptance tests
|
||
|
|
|
||
|
|
### Start
|
||
|
|
|
||
|
|
Start a Consul server configured to serve HTTP traffic, and validate incoming
|
||
|
|
HTTPS requests.
|
||
|
|
|
||
|
|
~/.go/src/github.com/hashicorp/terraform> consul agent \
|
||
|
|
-bind 127.0.0.1 \
|
||
|
|
-data-dir=/tmp \
|
||
|
|
-dev \
|
||
|
|
-config-file=builtin/providers/consul/text-fixtures/agent.json.example \
|
||
|
|
-server
|
||
|
|
|
||
|
|
### Test
|
||
|
|
|
||
|
|
With TLS, `CONSUL_HTTP_ADDR` must match the Common Name of the agent certificate.
|
||
|
|
|
||
|
|
~/.go/src/github.com/hashicorp/terraform> CONSUL_CERT_FILE=test-fixtures/usercert.pem \
|
||
|
|
CONSUL_KEY_FILE=test-fixtures/userkey.pem \
|
||
|
|
CONSUL_CA_FILE=test-fixtures/cacert.pem \
|
||
|
|
CONSUL_SCHEME=https \
|
||
|
|
CONSUL_HTTP_ADDR=127.0.0.1:8943 \
|
||
|
|
make testacc TEST=./builtin/providers/consul/
|