2
0
Richard Hansen dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
..
certs 70b95b1708 Fix create_server_certificate.sh 4 жил өмнө
requirements faad1cc29e ci: bump requests from 2.29.0 to 2.30.0 in /test/requirements 2 жил өмнө
stress_tests dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_custom dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_dockergen dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_fallback.data 035bd2b5ac fix: Remove `default_server` listen option from fallback server 2 жил өмнө
test_headers dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_internal dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_location-override.vhost.d 2115974e93 feat: Add ability to completely override location blocks 2 жил өмнө
test_multiple-ports dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_server-down dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_ssl 2b621599ff test: fix wildcard_certs_and_nohttps test 2 жил өмнө
test_trust-downstream-proxy af877cf784 feat: Add proxy header `X-Forwarded-Host` 2 жил өмнө
test_upstream-name dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_virtual-path dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
README.md a9cfdc843e docs: fix broken link 4 жил өмнө
conftest.py b5a54ac219 tests: Reduce scope of `docker_compose` fixture (and friends) 2 жил өмнө
pytest.ini 6fd3cfb38f fix(ci): :wrench: add markers on pytest.ini to fix warnings 4 жил өмнө
pytest.sh 912a065406 chore: Pass `--pull` to `docker build` to get fresh images 2 жил өмнө
test_DOCKER_HOST_unix_socket.py 6069bc53cd TESTS: replace old test suite with the new one 8 жил өмнө
test_DOCKER_HOST_unix_socket.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_composev2.py 6069bc53cd TESTS: replace old test suite with the new one 8 жил өмнө
test_composev2.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_default-host.py 6069bc53cd TESTS: replace old test suite with the new one 8 жил өмнө
test_default-host.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_default-root-none.py f8ae0a4b00 feat: `DEFAULT_ROOT=none` disables the default `location /` block 2 жил өмнө
test_default-root-none.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_events.py fc4c4e17ca ci: Add tests for the virtual-path routing 3 жил өмнө
test_events.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_fallback.py dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_http_port.py 6bb7c37605 test: custom HTTP port 4 жил өмнө
test_http_port.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_ipv6.py 6069bc53cd TESTS: replace old test suite with the new one 8 жил өмнө
test_ipv6.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_keepalive.py 49bb37dfdb feat: Add support for HTTP keep-alive between the proxy and upstream 2 жил өмнө
test_keepalive.yml 49bb37dfdb feat: Add support for HTTP keep-alive between the proxy and upstream 2 жил өмнө
test_loadbalancing.py 7ca1da8358 feat: Add support for HTTP load balancing between the proxy and upstream server groups (#2173) 2 жил өмнө
test_loadbalancing.yml 7ca1da8358 feat: Add support for HTTP load balancing between the proxy and upstream server groups (#2173) 2 жил өмнө
test_location-override.py 2115974e93 feat: Add ability to completely override location blocks 2 жил өмнө
test_location-override.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_log_format.py 07cc80ac6b feat: Support LOG_FORMAT env variable (#2151) 2 жил өмнө
test_log_format.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_multiple-hosts.py 6069bc53cd TESTS: replace old test suite with the new one 8 жил өмнө
test_multiple-hosts.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_multiple-networks.py 6162427c45 fix: Generate at most one `server` directive per container 2 жил өмнө
test_multiple-networks.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_nominal.py e22ae4a6fd tests: display container version 3 жил өмнө
test_nominal.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_raw-ip-vhost.py ba86bc04f6 tests: check for raw IPv4/6 used as VIRTUAL_HOST 3 жил өмнө
test_raw-ip-vhost.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_vhost-empty-string.py 8346b68a28 fix: Ignore `VIRTUAL_HOST` set to the empty string 2 жил өмнө
test_vhost-empty-string.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_vhost-in-multiple-networks.py 510d376f00 Make sure networks order is the same 3 жил өмнө
test_vhost-in-multiple-networks.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө
test_wildcard_host.py 37e85e6e8d chore(ci): :recycle: convert Python old `%` string to f-strings 4 жил өмнө
test_wildcard_host.yml dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing 2 жил өмнө

README.md

Nginx proxy test suite

Install requirements

You need python 3.9 and pip installed. Then run the commands:

pip install -r requirements/python-requirements.txt

Prepare the nginx-proxy test image

make build-nginx-proxy-test-debian

or if you want to test the alpine flavor:

make build-nginx-proxy-test-alpine

Run the test suite

pytest

need more verbosity ?

pytest -s

Run one single test module

pytest test_nominal.py

Write a test module

This test suite uses pytest. The conftest.py file will be automatically loaded by pytest and will provide you with two useful pytest fixtures:

  • docker_compose
  • nginxproxy

docker_compose fixture

When using the docker_compose fixture in a test, pytest will try to find a yml file named after your test module filename. For instance, if your test module is test_example.py, then the docker_compose fixture will try to load a test_example.yml docker compose file.

Once the docker compose file found, the fixture will remove all containers, run docker-compose up, and finally your test will be executed.

The fixture will run the docker-compose command with the -f option to load the given compose file. So you can test your docker compose file syntax by running it yourself with:

docker-compose -f test_example.yml up -d

In the case you are running pytest from within a docker container, the docker_compose fixture will make sure the container running pytest is attached to all docker networks. That way, your test will be able to reach any of them.

In your tests, you can use the docker_compose variable to query and command the docker daemon as it provides you with a client from the docker python module.

Also this fixture alters the way the python interpreter resolves domain names to IP addresses in the following ways:

Any domain name containing the substring nginx-proxy will resolve to the IP address of the container that was created from the nginxproxy/nginx-proxy:test image. So all the following domain names will resolve to the nginx-proxy container in tests:

  • nginx-proxy
  • nginx-proxy.com
  • www.nginx-proxy.com
  • www.nginx-proxy.test
  • www.nginx-proxy
  • whatever.nginx-proxyooooooo
  • ...

Any domain name ending with XXX.container.docker will resolve to the IP address of the XXX container.

  • web1.container.docker will resolve to the IP address of the web1 container
  • f00.web1.container.docker will resolve to the IP address of the web1 container
  • anything.whatever.web2.container.docker will resolve to the IP address of the web2 container

Otherwise, domain names are resoved as usual using your system DNS resolver.

nginxproxy fixture

The nginxproxy fixture will provide you with a replacement for the python requests module. This replacement will just repeat up to 30 times a requests if it receives the HTTP error 404 or 502. This error occurs when you try to send queries to nginx-proxy too early after the container creation.

Also this requests replacement is preconfigured to use the Certificate Authority root certificate certs/ca-root.crt to validate https connections.

Furthermore, the nginxproxy methods accept an additional keyword parameter: ipv6 which forces requests made against containers to use the containers IPv6 address when set to True. If IPv6 is not supported by the system or docker, that particular test will be skipped.

def test_forwards_to_web1_ipv6(docker_compose, nginxproxy):
    r = nginxproxy.get("http://web1.nginx-proxy.tld/port", ipv6=True)
    assert r.status_code == 200   
    assert r.text == "answer from port 81\n"

The web docker image

When you run the make build-webserver command, you built a web docker image which is convenient for running a small web server in a container. This image can produce containers that listens on multiple ports at the same time.

Testing TLS

If you need to create server certificates, use the certs/create_server_certificate.sh script. Pytest will be able to validate any certificate issued from this script.