mirror of
https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git
synced 2026-07-21 11:38:59 +02:00
Reverts the stream-mode scenario to the Traefik docker provider (the file provider was a workaround for a local docker daemon API version mismatch, irrelevant in CI). Bumps Traefik to v3.7.1 and Crowdsec to v1.7.8 across all scenarios. Adds six new E2E scenarios: - live-mode: short defaultDecisionSeconds, verifies cache-then-recheck - none-mode: verifies LAPI is queried per request, no caching - trusted-ips: clientTrustedIPs bypass even when the trusted IP is banned - custom-ban-page: BanHTMLFilePath body + Content-Type validation - captcha: captcha decision serves the captcha page (HTTP 200) - appsec: SQLi probe blocked by appsec-virtual-patching Each scenario uses an isolated compose project, mounts the repo as a local plugin, and asserts behavior via curl. Workflow matrix and Makefile E2E_SCENARIOS updated accordingly. Refs #328
126 lines
3.3 KiB
Makefile
126 lines
3.3 KiB
Makefile
.PHONY: lint test vendor clean e2e
|
|
|
|
export GO111MODULE=on
|
|
|
|
E2E_SCENARIOS := stream-mode live-mode none-mode trusted-ips custom-ban-page captcha appsec
|
|
|
|
default: lint test
|
|
|
|
lint:
|
|
golangci-lint run
|
|
|
|
test:
|
|
go test -v -cover ./...
|
|
|
|
yaegi_test:
|
|
yaegi test -v .
|
|
|
|
e2e: $(addprefix e2e_,$(E2E_SCENARIOS))
|
|
|
|
e2e_%:
|
|
./tests/e2e/scenarios/$*/run.sh
|
|
|
|
vendor:
|
|
go mod vendor
|
|
|
|
clean:
|
|
rm -rf ./vendor
|
|
|
|
run_dev:
|
|
docker compose -f docker-compose.dev.yml up -d --remove-orphans
|
|
|
|
run_local:
|
|
docker compose -f docker-compose.local.yml up -d --remove-orphans
|
|
|
|
run_behindproxy:
|
|
docker compose -f examples/behind-proxy/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_cacheredis:
|
|
docker compose -f examples/redis-cache/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_trustedips:
|
|
docker compose -f examples/trusted-ips/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_binaryvm:
|
|
cd examples/binary-vm/ && sudo vagrant up
|
|
|
|
run_tlsauth:
|
|
docker compose -f examples/tls-auth/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_appsec:
|
|
docker compose -f examples/appsec-enabled/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_custom_captcha:
|
|
docker compose -f examples/custom-captcha/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_captcha:
|
|
docker compose -f examples/captcha/docker-compose.yml up -d --remove-orphans
|
|
|
|
run_custom_ban_page:
|
|
docker compose -f examples/custom-ban-page/docker-compose.yml up -d --remove-orphans
|
|
|
|
run:
|
|
docker compose -f docker-compose.yml up -d --remove-orphans
|
|
|
|
restart_dev:
|
|
docker compose -f docker-compose.dev.yml restart
|
|
|
|
restart_local:
|
|
docker compose -f docker-compose.local.yml restart
|
|
|
|
restart:
|
|
docker compose -f docker-compose.yml restart
|
|
|
|
restart_behindproxy:
|
|
docker compose -f examples/behind-proxy/docker-compose.yml restart
|
|
|
|
restart_cacheredis:
|
|
docker compose -f examples/redis-cache/docker-compose.yml restart
|
|
|
|
restart_trustedips:
|
|
docker compose -f examples/trusted-ips/docker-compose.yml restart
|
|
|
|
restart_tlsauth:
|
|
docker compose -f examples/tls-auth/docker-compose.yml
|
|
|
|
restart_appsec:
|
|
docker compose -f examples/tls-auth/docker-compose.yml
|
|
|
|
restart_captcha:
|
|
docker compose -f examples/captcha/docker-compose.yml
|
|
|
|
restart_custombanpage:
|
|
docker compose -f examples/custom-ban-page/docker-compose.yml
|
|
|
|
show_logs:
|
|
docker compose -f docker-compose.yml restart
|
|
|
|
show_local_logs:
|
|
docker compose -f docker-compose.local.yml logs -f
|
|
|
|
show_dev_logs:
|
|
docker compose -f docker-compose.dev.yml logs -f
|
|
|
|
clean_all_docker:
|
|
docker compose -f examples/behind-proxy/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/redis-cache/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/trusted-ips/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/tls-auth/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/appsec-enabled/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/captcha/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/custom-captcha/docker-compose.yml down --remove-orphans
|
|
docker compose -f examples/custom-ban-page/docker-compose.yml down --remove-orphans
|
|
docker compose -f docker-compose.local.yml down --remove-orphans
|
|
docker compose -f docker-compose.yml down --remove-orphans
|
|
|
|
clean_vagrant:
|
|
cd examples/binary-vm/ && sudo vagrant destroy -f
|
|
|
|
|
|
show_metrics:
|
|
docker exec crowdsec cscli metrics
|
|
|
|
show_decisions:
|
|
docker exec crowdsec cscli decisions list
|
|
|