Merge pull request #11019 from boaz0/test_cors

Add tests to verify CORs is enabled

test/system/271-tcp-cors-server.bats

@@ -0,0 +1,44 @@
+#!/usr/bin/env bats   -*- bats -*-
+#
+# Tests podman system service CORS enabled
+#
+
+load helpers
+
+SERVICE_NAME="podman_test_$(random_string)"
+
+SERVICE_TCP_HOST="localhost"
+
+SERVICE_FILE="$UNIT_DIR/$SERVICE_NAME.service"
+SOCKET_FILE="$UNIT_DIR/$SERVICE_NAME.socket"
+
+@test "podman system service - tcp CORS" {
+    skip_if_remote "system service tests are meaningless over remote"
+    PORT=$(( ((RANDOM<<15)|RANDOM) % 63001 + 2000 ))
+    run_podman system service --cors="*" tcp:$SERVICE_TCP_HOST:$PORT -t 20 &
+    podman_pid="$!"
+    sleep 5s
+    run curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping 2>&1
+    is "$output" ".*< Access-Control-Allow-Origin: \*.*" "access-control-allow-origin verifies CORS is set"
+    kill $podman_pid
+    wait $podman_pid || true
+}
+
+@test "podman system service - tcp without CORS" {
+    skip_if_remote "system service tests are meaningless over remote"
+    PORT=$(( ((RANDOM<<15)|RANDOM) % 63001 + 2000 ))
+    run_podman system service tcp:$SERVICE_TCP_HOST:$PORT -t 20 &
+    podman_pid="$!"
+    sleep 5s
+    (curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping 2>&1 | grep -Eq "Access-Control-Allow-Origin:") && false || true
+    kill $podman_pid
+    wait $podman_pid || true
+}
+
+@test "podman system service - CORS enabled in logs" {
+    skip_if_remote "system service tests are meaningless over remote"
+    run_podman system service --log-level="debug" --cors="*" -t 1
+    is "$output" ".*CORS Headers were set to \*.*" "debug log confirms CORS headers set"
+}
+
+# vim: filetype=sh