context("secrets")


test_that("create and delete", {
  docker_versions <- test_docker_versions()
  cl <- test_docker_client()

  id <- cl$swarm$init()
  on.exit(cl$swarm$leave(TRUE))

  ## This set of tests is highly version specific with at three
  ## patches so I am going to test it over all supported versions:
  for (v in docker_versions) {
    cl_v <- docker_client(api_version = v)

    key <- rand_str()
    id <- cl$secret$create(key, "secret!")
    expect_is(id, "character")
    expect_true(id %in% cl$secret$list()$id)
    expect_true(key %in% cl$secret$list()$name)

    dat <- cl$secret$inspect(id)
    expect_identical(cl$secret$inspect(key), dat)

    expect_null(cl$secret$remove(key))
    expect_false(id %in% cl$secret$list()$id)
    expect_false(key %in% cl$secret$list()$name)
  }
})


test_that("add to container", {
  cl <- test_docker_client()

  cl$swarm$init()
  on.exit(cl$swarm$leave(TRUE))

  name <- "mysecret"
  data <- "secret!"
  id <- cl$secret$create(name, data)

  ans <- cl$service$create(name = "redis",
                           image = "redis",
                           secrets = name,
                           timeout = 20,
                           time_wait_stable = 0,
                           stream = NULL)

  tasks <- ans$tasks(list("desired-state" = "running"))
  expect_equal(length(tasks), 1L)

  container_id <- tasks[[1]]$inspect()$status$container_status$container_id
  container <- cl$container$get(container_id)
  log <- container$exec(c("cat", sprintf("/run/secrets/%s", name)),
                        stream = FALSE)
  expect_identical(as.character(log$output), data)

  ## This ensures that the daemon has time to clean up the temporary
  ## volume that it needs to use.
  ans$remove()
  wait_until_container_gone(container)
})