SECRETS: Add configurable payload size limit of a secret

Resolves:
https://fedorahosted.org/sssd/ticket/3169

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

1 files changed, 15 insertions, 0 deletions

diff --git a/src/tests/intg/test_secrets.py b/src/tests/intg/test_secrets.py
index 09a91e073..7a9de1aec 100644
--- a/src/tests/intg/test_secrets.py
+++ b/src/tests/intg/test_secrets.py
@@ -87,6 +87,7 @@ def setup_for_secrets(request):
 
         [secrets]
         max_secrets = 10
+        max_payload_size = 2
     """).format(**locals())
 
     create_conf_fixture(request, conf)
@@ -155,6 +156,20 @@ def test_crd_ops(setup_for_secrets, secrets_cli):
     for x in xrange(MAX_SECRETS):
         cli.del_secret(str(x))
 
+    # Don't allow storing a secrets which has a payload larger
+    # than max_payload_size
+    KILOBYTE = 1024
+    MAX_PAYLOAD_SIZE = 2 * KILOBYTE
+
+    sec_value = "x" * MAX_PAYLOAD_SIZE
+
+    cli.set_secret("foo", sec_value)
+
+    sec_value += "x"
+    with pytest.raises(HTTPError) as err413:
+        cli.set_secret("bar", sec_value)
+    assert str(err413.value).startswith("413")
+
 
 def test_containers(setup_for_secrets, secrets_cli):
     """