LCORE-1027: unit tests for RH identity authentication plugin

Author: tisnik

tests/unit/models/config/test_authentication_configuration.py

@@ -10,6 +10,7 @@
     AuthenticationConfiguration,
     Configuration,
     JwkConfiguration,
+    RHIdentityConfiguration,
     LlamaStackConfiguration,
     ServiceConfiguration,
     UserDataCollection,
@@ -19,6 +20,7 @@
     AUTH_MOD_NOOP,
     AUTH_MOD_K8S,
     AUTH_MOD_JWK_TOKEN,
+    AUTH_MOD_RH_IDENTITY,
 )
 
 
@@ -36,6 +38,7 @@ def test_authentication_configuration() -> None:
     assert auth_config.skip_tls_verification is False
     assert auth_config.k8s_ca_cert_path is None
     assert auth_config.k8s_cluster_api is None
+    assert auth_config.rh_identity_config is None
 
     # try to retrieve JWK configuration
     with pytest.raises(
@@ -45,6 +48,92 @@ def test_authentication_configuration() -> None:
         _ = auth_config.jwk_configuration
 
 
+def test_authentication_configuration_rh_identity() -> None:
+    """Test the AuthenticationConfiguration with RH identity token."""
+
+    auth_config = AuthenticationConfiguration(
+        module=AUTH_MOD_RH_IDENTITY,
+        skip_tls_verification=False,
+        k8s_ca_cert_path=None,
+        k8s_cluster_api=None,
+        rh_identity_config=RHIdentityConfiguration(required_entitlements=[]),
+    )
+    assert auth_config is not None
+    assert auth_config.module == AUTH_MOD_RH_IDENTITY
+    assert auth_config.skip_tls_verification is False
+    assert auth_config.k8s_ca_cert_path is None
+    assert auth_config.k8s_cluster_api is None
+    assert auth_config.rh_identity_config is not None
+
+
+def test_authentication_configuration_rh_identity_default_value() -> None:
+    """Test the AuthenticationConfiguration with RH identity token."""
+
+    auth_config = AuthenticationConfiguration(
+        module=AUTH_MOD_RH_IDENTITY,
+        skip_tls_verification=False,
+        k8s_ca_cert_path=None,
+        k8s_cluster_api=None,
+        rh_identity_config=RHIdentityConfiguration(),
+    )
+    assert auth_config is not None
+    assert auth_config.module == AUTH_MOD_RH_IDENTITY
+    assert auth_config.skip_tls_verification is False
+    assert auth_config.k8s_ca_cert_path is None
+    assert auth_config.k8s_cluster_api is None
+    assert auth_config.rh_identity_config is not None
+
+
+def test_authentication_configuration_rh_identity_one_entitlement() -> None:
+    """Test the AuthenticationConfiguration with RH identity token."""
+
+    auth_config = AuthenticationConfiguration(
+        module=AUTH_MOD_RH_IDENTITY,
+        skip_tls_verification=False,
+        k8s_ca_cert_path=None,
+        k8s_cluster_api=None,
+        rh_identity_config=RHIdentityConfiguration(required_entitlements=["foo"]),
+    )
+    assert auth_config is not None
+    assert auth_config.module == AUTH_MOD_RH_IDENTITY
+    assert auth_config.skip_tls_verification is False
+    assert auth_config.k8s_ca_cert_path is None
+    assert auth_config.k8s_cluster_api is None
+    assert auth_config.rh_identity_config is not None
+
+
+def test_authentication_configuration_rh_identity_more_entitlements() -> None:
+    """Test the AuthenticationConfiguration with RH identity token."""
+
+    auth_config = AuthenticationConfiguration(
+        module=AUTH_MOD_RH_IDENTITY,
+        skip_tls_verification=False,
+        k8s_ca_cert_path=None,
+        k8s_cluster_api=None,
+        rh_identity_config=RHIdentityConfiguration(
+            required_entitlements=["foo", "bar", "baz"]
+        ),
+    )
+    assert auth_config is not None
+    assert auth_config.module == AUTH_MOD_RH_IDENTITY
+    assert auth_config.skip_tls_verification is False
+    assert auth_config.k8s_ca_cert_path is None
+    assert auth_config.k8s_cluster_api is None
+    assert auth_config.rh_identity_config is not None
+
+
+def test_authentication_configuration_rh_identity_but_insufficient_config() -> None:
+    """Test the AuthenticationConfiguration with RH identity token."""
+
+    with pytest.raises(ValidationError, match="RH"):
+        AuthenticationConfiguration(
+            module=AUTH_MOD_RH_IDENTITY,
+            skip_tls_verification=False,
+            k8s_ca_cert_path=None,
+            k8s_cluster_api=None,
+        )
+
+
 def test_authentication_configuration_jwk_token() -> None:
     """Test the AuthenticationConfiguration with JWK token."""