sascha/homelab-butler
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request 'Hetzner-DNS-Token über eindeutigen Vaultalias auflösen' (#31) from fix/hetzner-dns-vault-alias-20260814 into main

Browse source
This commit is contained in:
sascha 2026-08-14 10:34:31 +02:00
commit 517669be55
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app.py
View file

@ -984,6 +984,9 @@ def _get_hetzner_dns_token() -> str:
token = _read("HETZNER_DNS_TOKEN") token = _read("HETZNER_DNS_TOKEN")
if token: if token:
return token return token
aliases = [value for key, value in _vault_cache.items() if "hetzner" in key.lower() and "dns" in key.lower() and value.strip()]
if len(aliases) == 1:
return aliases[0].strip()
rc, _out, err = _ssh( rc, _out, err = _ssh(
"sascha@10.4.1.116", "sascha@10.4.1.116",
"sudo bash /data/stacks/homelab-butler/vault-sync.sh", "sudo bash /data/stacks/homelab-butler/vault-sync.sh",

7
tests/test_app.py
View file

@ -277,6 +277,13 @@ def test_dns_rrset_dry_run_returns_only_selected_records(monkeypatch):
assert body["deleted"] == [] assert body["deleted"] == []
def test_hetzner_dns_token_accepts_single_sanitized_vault_alias(monkeypatch):
monkeypatch.setattr(app, "_vault_cache", {"hetzner-dns-api": "secret-value", "other": "ignored"})
monkeypatch.setattr(app, "_read", lambda _name: None)
monkeypatch.setattr(app, "_ssh", lambda *_args, **_kwargs: (_ for _ in ()).throw(AssertionError("must not sync vault")))
assert app._get_hetzner_dns_token() == "secret-value"
def test_invalid_log_target_is_rejected_before_ssh(): def test_invalid_log_target_is_rejected_before_ssh():
with TestClient(app.app) as client: with TestClient(app.app) as client:
response = client.get( response = client.get(