traefik/provider/ecs/config_test.go

package ecs

import (
	"testing"
	"time"

	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/service/ec2"
	"github.com/aws/aws-sdk-go/service/ecs"
	"github.com/containous/flaeg"
	"github.com/containous/traefik/provider/label"
	"github.com/containous/traefik/types"
	"github.com/stretchr/testify/assert"
)

func TestBuildConfiguration(t *testing.T) {
	tests := []struct {
		desc     string
		services map[string][]ecsInstance
		expected *types.Configuration
		err      error
	}{
		{
			desc: "config parsed successfully",
			services: map[string][]ecsInstance{
				"testing": {{
					Name: "instance",
					ID:   "1",
					containerDefinition: &ecs.ContainerDefinition{
						DockerLabels: map[string]*string{},
					},
					machine: &ec2.Instance{
						PrivateIpAddress: aws.String("10.0.0.1"),
					},
					container: &ecs.Container{
						NetworkBindings: []*ecs.NetworkBinding{{
							HostPort: aws.Int64(1337),
						}},
					},
				}},
			},
			expected: &types.Configuration{
				Backends: map[string]*types.Backend{
					"backend-testing": {
						Servers: map[string]types.Server{
							"server-instance-1": {
								URL: "http://10.0.0.1:1337",
							}},
					},
				},
				Frontends: map[string]*types.Frontend{
					"frontend-testing": {
						EntryPoints: []string{},
						Backend:     "backend-testing",
						Routes: map[string]types.Route{
							"route-frontend-testing": {
								Rule: "Host:instance.",
							},
						},
						PassHostHeader: true,
						BasicAuth:      []string{},
					},
				},
			},
		},
		{
			desc: "config parsed successfully with health check labels",
			services: map[string][]ecsInstance{
				"testing": {{
					Name: "instance",
					ID:   "1",
					containerDefinition: &ecs.ContainerDefinition{
						DockerLabels: map[string]*string{
							label.TraefikBackendHealthCheckPath:     aws.String("/health"),
							label.TraefikBackendHealthCheckInterval: aws.String("1s"),
						}},
					machine: &ec2.Instance{
						PrivateIpAddress: aws.String("10.0.0.1"),
					},
					container: &ecs.Container{
						NetworkBindings: []*ecs.NetworkBinding{{
							HostPort: aws.Int64(1337),
						}},
					},
				}},
			},
			expected: &types.Configuration{
				Backends: map[string]*types.Backend{
					"backend-testing": {
						HealthCheck: &types.HealthCheck{
							Path:     "/health",
							Interval: "1s",
						},
						Servers: map[string]types.Server{
							"server-instance-1": {
								URL: "http://10.0.0.1:1337",
							}},
					},
				},
				Frontends: map[string]*types.Frontend{
					"frontend-testing": {
						EntryPoints: []string{},
						Backend:     "backend-testing",
						Routes: map[string]types.Route{
							"route-frontend-testing": {
								Rule: "Host:instance.",
							},
						},
						PassHostHeader: true,
						BasicAuth:      []string{},
					},
				},
			},
		},
		{
			desc: "when all labels are set",
			services: map[string][]ecsInstance{
				"testing-instance": {{
					Name: "testing-instance",
					ID:   "6",
					containerDefinition: &ecs.ContainerDefinition{
						DockerLabels: map[string]*string{
							label.TraefikPort:     aws.String("666"),
							label.TraefikProtocol: aws.String("https"),
							label.TraefikWeight:   aws.String("12"),

							label.TraefikBackend: aws.String("foobar"),

							label.TraefikBackendCircuitBreakerExpression:         aws.String("NetworkErrorRatio() > 0.5"),
							label.TraefikBackendHealthCheckPath:                  aws.String("/health"),
							label.TraefikBackendHealthCheckPort:                  aws.String("880"),
							label.TraefikBackendHealthCheckInterval:              aws.String("6"),
							label.TraefikBackendLoadBalancerMethod:               aws.String("drr"),
							label.TraefikBackendLoadBalancerSticky:               aws.String("true"),
							label.TraefikBackendLoadBalancerStickiness:           aws.String("true"),
							label.TraefikBackendLoadBalancerStickinessCookieName: aws.String("chocolate"),
							label.TraefikBackendMaxConnAmount:                    aws.String("666"),
							label.TraefikBackendMaxConnExtractorFunc:             aws.String("client.ip"),
							label.TraefikBackendBufferingMaxResponseBodyBytes:    aws.String("10485760"),
							label.TraefikBackendBufferingMemResponseBodyBytes:    aws.String("2097152"),
							label.TraefikBackendBufferingMaxRequestBodyBytes:     aws.String("10485760"),
							label.TraefikBackendBufferingMemRequestBodyBytes:     aws.String("2097152"),
							label.TraefikBackendBufferingRetryExpression:         aws.String("IsNetworkError() && Attempts() <= 2"),

							label.TraefikFrontendAuthBasic:                 aws.String("test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/,test2:$apr1$d9hr9HBB$4HxwgUir3HP4EsggP/QNo0"),
							label.TraefikFrontendEntryPoints:               aws.String("http,https"),
							label.TraefikFrontendPassHostHeader:            aws.String("true"),
							label.TraefikFrontendPassTLSCert:               aws.String("true"),
							label.TraefikFrontendPriority:                  aws.String("666"),
							label.TraefikFrontendRedirectEntryPoint:        aws.String("https"),
							label.TraefikFrontendRedirectRegex:             aws.String("nope"),
							label.TraefikFrontendRedirectReplacement:       aws.String("nope"),
							label.TraefikFrontendRedirectPermanent:         aws.String("true"),
							label.TraefikFrontendRule:                      aws.String("Host:traefik.io"),
							label.TraefikFrontendWhiteListSourceRange:      aws.String("10.10.10.10"),
							label.TraefikFrontendWhiteListUseXForwardedFor: aws.String("true"),

							label.TraefikFrontendRequestHeaders:          aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
							label.TraefikFrontendResponseHeaders:         aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
							label.TraefikFrontendSSLProxyHeaders:         aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
							label.TraefikFrontendAllowedHosts:            aws.String("foo,bar,bor"),
							label.TraefikFrontendHostsProxyHeaders:       aws.String("foo,bar,bor"),
							label.TraefikFrontendSSLHost:                 aws.String("foo"),
							label.TraefikFrontendCustomFrameOptionsValue: aws.String("foo"),
							label.TraefikFrontendContentSecurityPolicy:   aws.String("foo"),
							label.TraefikFrontendPublicKey:               aws.String("foo"),
							label.TraefikFrontendReferrerPolicy:          aws.String("foo"),
							label.TraefikFrontendCustomBrowserXSSValue:   aws.String("foo"),
							label.TraefikFrontendSTSSeconds:              aws.String("666"),
							label.TraefikFrontendSSLRedirect:             aws.String("true"),
							label.TraefikFrontendSSLTemporaryRedirect:    aws.String("true"),
							label.TraefikFrontendSTSIncludeSubdomains:    aws.String("true"),
							label.TraefikFrontendSTSPreload:              aws.String("true"),
							label.TraefikFrontendForceSTSHeader:          aws.String("true"),
							label.TraefikFrontendFrameDeny:               aws.String("true"),
							label.TraefikFrontendContentTypeNosniff:      aws.String("true"),
							label.TraefikFrontendBrowserXSSFilter:        aws.String("true"),
							label.TraefikFrontendIsDevelopment:           aws.String("true"),

							label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageStatus:  aws.String("404"),
							label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageBackend: aws.String("foobar"),
							label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageQuery:   aws.String("foo_query"),
							label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageStatus:  aws.String("500,600"),
							label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageBackend: aws.String("foobar"),
							label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageQuery:   aws.String("bar_query"),

							label.TraefikFrontendRateLimitExtractorFunc:                                        aws.String("client.ip"),
							label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitPeriod:  aws.String("6"),
							label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitAverage: aws.String("12"),
							label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitBurst:   aws.String("18"),
							label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitPeriod:  aws.String("3"),
							label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitAverage: aws.String("6"),
							label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitBurst:   aws.String("9"),
						}},
					machine: &ec2.Instance{
						PrivateIpAddress: aws.String("10.0.0.1"),
					},
					container: &ecs.Container{
						NetworkBindings: []*ecs.NetworkBinding{{
							HostPort: aws.Int64(1337),
						}},
					},
				}},
			},
			expected: &types.Configuration{
				Backends: map[string]*types.Backend{
					"backend-testing-instance": {
						Servers: map[string]types.Server{
							"server-testing-instance-6": {
								URL:    "https://10.0.0.1:666",
								Weight: 12,
							},
						},
						CircuitBreaker: &types.CircuitBreaker{
							Expression: "NetworkErrorRatio() > 0.5",
						},
						LoadBalancer: &types.LoadBalancer{
							Method: "drr",
							Sticky: true,
							Stickiness: &types.Stickiness{
								CookieName: "chocolate",
							},
						},
						MaxConn: &types.MaxConn{
							Amount:        666,
							ExtractorFunc: "client.ip",
						},
						HealthCheck: &types.HealthCheck{
							Path:     "/health",
							Port:     880,
							Interval: "6",
						},
						Buffering: &types.Buffering{
							MaxResponseBodyBytes: 10485760,
							MemResponseBodyBytes: 2097152,
							MaxRequestBodyBytes:  10485760,
							MemRequestBodyBytes:  2097152,
							RetryExpression:      "IsNetworkError() && Attempts() <= 2",
						},
					},
				},
				Frontends: map[string]*types.Frontend{
					"frontend-testing-instance": {
						EntryPoints: []string{
							"http",
							"https",
						},
						Backend: "backend-testing-instance",
						Routes: map[string]types.Route{
							"route-frontend-testing-instance": {
								Rule: "Host:traefik.io",
							},
						},
						PassHostHeader: true,
						PassTLSCert:    true,
						Priority:       666,
						BasicAuth: []string{
							"test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/",
							"test2:$apr1$d9hr9HBB$4HxwgUir3HP4EsggP/QNo0",
						},
						WhiteList: &types.WhiteList{
							SourceRange:      []string{"10.10.10.10"},
							UseXForwardedFor: true,
						},
						Headers: &types.Headers{
							CustomRequestHeaders: map[string]string{
								"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
								"Content-Type":                 "application/json; charset=utf-8",
							},
							CustomResponseHeaders: map[string]string{
								"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
								"Content-Type":                 "application/json; charset=utf-8",
							},
							AllowedHosts: []string{
								"foo",
								"bar",
								"bor",
							},
							HostsProxyHeaders: []string{
								"foo",
								"bar",
								"bor",
							},
							SSLRedirect:          true,
							SSLTemporaryRedirect: true,
							SSLHost:              "foo",
							SSLProxyHeaders: map[string]string{
								"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
								"Content-Type":                 "application/json; charset=utf-8",
							},
							STSSeconds:              666,
							STSIncludeSubdomains:    true,
							STSPreload:              true,
							ForceSTSHeader:          true,
							FrameDeny:               true,
							CustomFrameOptionsValue: "foo",
							ContentTypeNosniff:      true,
							BrowserXSSFilter:        true,
							CustomBrowserXSSValue:   "foo",
							ContentSecurityPolicy:   "foo",
							PublicKey:               "foo",
							ReferrerPolicy:          "foo",
							IsDevelopment:           true,
						},
						Errors: map[string]*types.ErrorPage{
							"bar": {
								Status: []string{
									"500",
									"600",
								},
								Backend: "foobar",
								Query:   "bar_query",
							},
							"foo": {
								Status: []string{
									"404",
								},
								Backend: "foobar",
								Query:   "foo_query",
							},
						},
						RateLimit: &types.RateLimit{
							RateSet: map[string]*types.Rate{
								"bar": {
									Period:  flaeg.Duration(3 * time.Second),
									Average: 6,
									Burst:   9,
								},
								"foo": {
									Period:  flaeg.Duration(6 * time.Second),
									Average: 12,
									Burst:   18,
								},
							},
							ExtractorFunc: "client.ip",
						},
						Redirect: &types.Redirect{
							EntryPoint:  "https",
							Regex:       "",
							Replacement: "",
							Permanent:   true,
						},
					},
				},
			},
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			provider := &Provider{}
			got, err := provider.buildConfiguration(test.services)
			assert.Equal(t, test.err, err)
			assert.Equal(t, test.expected, got, test.desc)
		})
	}
}

func TestFilterInstance(t *testing.T) {
	nilPrivateIP := simpleEcsInstance(map[string]*string{})
	nilPrivateIP.machine.PrivateIpAddress = nil

	nilMachine := simpleEcsInstance(map[string]*string{})
	nilMachine.machine = nil

	nilMachineState := simpleEcsInstance(map[string]*string{})
	nilMachineState.machine.State = nil

	nilMachineStateName := simpleEcsInstance(map[string]*string{})
	nilMachineStateName.machine.State.Name = nil

	invalidMachineState := simpleEcsInstance(map[string]*string{})
	invalidMachineState.machine.State.Name = aws.String(ec2.InstanceStateNameStopped)

	noNetwork := simpleEcsInstanceNoNetwork(map[string]*string{})

	noNetworkWithLabel := simpleEcsInstanceNoNetwork(map[string]*string{
		label.TraefikPort: aws.String("80"),
	})

	tests := []struct {
		desc             string
		instanceInfo     ecsInstance
		exposedByDefault bool
		expected         bool
	}{
		{
			desc:             "Instance without enable label and exposed by default enabled should be not filtered",
			instanceInfo:     simpleEcsInstance(map[string]*string{}),
			exposedByDefault: true,
			expected:         true,
		},
		{
			desc:             "Instance without enable label and exposed by default disabled should be filtered",
			instanceInfo:     simpleEcsInstance(map[string]*string{}),
			exposedByDefault: false,
			expected:         false,
		},
		{
			desc: "Instance with enable label set to false and exposed by default enabled should be filtered",
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikEnable: aws.String("false"),
			}),
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc: "Instance with enable label set to true and exposed by default disabled should be not filtered",
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikEnable: aws.String("true"),
			}),
			exposedByDefault: false,
			expected:         true,
		},
		{
			desc:             "Instance with nil private ip and exposed by default enabled should be filtered",
			instanceInfo:     nilPrivateIP,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with nil machine and exposed by default enabled should be filtered",
			instanceInfo:     nilMachine,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with nil machine state and exposed by default enabled should be filtered",
			instanceInfo:     nilMachineState,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with nil machine state name and exposed by default enabled should be filtered",
			instanceInfo:     nilMachineStateName,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with invalid machine state and exposed by default enabled should be filtered",
			instanceInfo:     invalidMachineState,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with no port mappings should be filtered",
			instanceInfo:     noNetwork,
			exposedByDefault: true,
			expected:         false,
		},
		{
			desc:             "Instance with no port mapping and with label should not be filtered",
			instanceInfo:     noNetworkWithLabel,
			exposedByDefault: true,
			expected:         true,
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			prov := &Provider{
				ExposedByDefault: test.exposedByDefault,
			}
			actual := prov.filterInstance(test.instanceInfo)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestChunkedTaskArns(t *testing.T) {
	testVal := "a"
	tests := []struct {
		desc            string
		count           int
		expectedLengths []int
	}{
		{
			desc:            "0 parameter should return nil",
			count:           0,
			expectedLengths: []int(nil),
		},
		{
			desc:            "1 parameter should return 1 array of 1 element",
			count:           1,
			expectedLengths: []int{1},
		},
		{
			desc:            "99 parameters should return 1 array of 99 elements",
			count:           99,
			expectedLengths: []int{99},
		},
		{
			desc:            "100 parameters should return 1 array of 100 elements",
			count:           100,
			expectedLengths: []int{100},
		},
		{
			desc:            "101 parameters should return 1 array of 100 elements and 1 array of 1 element",
			count:           101,
			expectedLengths: []int{100, 1},
		},
		{
			desc:            "199 parameters should return 1 array of 100 elements and 1 array of 99 elements",
			count:           199,
			expectedLengths: []int{100, 99},
		},
		{
			desc:            "200 parameters should return 2 arrays of 100 elements each",
			count:           200,
			expectedLengths: []int{100, 100},
		},
		{
			desc:            "201 parameters should return 2 arrays of 100 elements each and 1 array of 1 element",
			count:           201,
			expectedLengths: []int{100, 100, 1},
		},
		{
			desc:            "555 parameters should return 5 arrays of 100 elements each and 1 array of 55 elements",
			count:           555,
			expectedLengths: []int{100, 100, 100, 100, 100, 55},
		},
		{
			desc:            "1001 parameters should return 10 arrays of 100 elements each and 1 array of 1 element",
			count:           1001,
			expectedLengths: []int{100, 100, 100, 100, 100, 100, 100, 100, 100, 100, 1},
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			var tasks []*string
			for v := 0; v < test.count; v++ {
				tasks = append(tasks, &testVal)
			}

			out := chunkedTaskArns(tasks)
			var outCount []int

			for _, el := range out {
				outCount = append(outCount, len(el))
			}

			assert.Equal(t, test.expectedLengths, outCount, "Chunking %d elements", test.count)
		})
	}
}

func TestGetHost(t *testing.T) {
	tests := []struct {
		desc         string
		expected     string
		instanceInfo ecsInstance
	}{
		{
			desc:         "Default host should be 10.0.0.0",
			expected:     "10.0.0.0",
			instanceInfo: simpleEcsInstance(map[string]*string{}),
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getHost(test.instanceInfo)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetPort(t *testing.T) {
	tests := []struct {
		desc         string
		expected     string
		instanceInfo ecsInstance
	}{
		{
			desc:         "Default port should be 80",
			expected:     "80",
			instanceInfo: simpleEcsInstance(map[string]*string{}),
		},
		{
			desc:     "Label should override network port",
			expected: "4242",
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikPort: aws.String("4242"),
			}),
		},
		{
			desc:     "Label should provide exposed port",
			expected: "80",
			instanceInfo: simpleEcsInstanceNoNetwork(map[string]*string{
				label.TraefikPort: aws.String("80"),
			}),
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getPort(test.instanceInfo)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetFuncStringValue(t *testing.T) {
	tests := []struct {
		desc         string
		expected     string
		instanceInfo ecsInstance
	}{
		{
			desc:         "Protocol label is not set should return a string equals to http",
			expected:     "http",
			instanceInfo: simpleEcsInstance(map[string]*string{}),
		},
		{
			desc:     "Protocol label is set to http should return a string equals to http",
			expected: "http",
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikProtocol: aws.String("http"),
			}),
		},
		{
			desc:     "Protocol label is set to https should return a string equals to https",
			expected: "https",
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikProtocol: aws.String("https"),
			}),
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getFuncStringValue(label.TraefikProtocol, label.DefaultProtocol)(test.instanceInfo)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetFuncSliceString(t *testing.T) {
	tests := []struct {
		desc         string
		expected     []string
		instanceInfo ecsInstance
	}{
		{
			desc:         "Frontend entrypoints label not set should return empty array",
			expected:     nil,
			instanceInfo: simpleEcsInstance(map[string]*string{}),
		},
		{
			desc:     "Frontend entrypoints label set to http should return a string array of 1 element",
			expected: []string{"http"},
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikFrontendEntryPoints: aws.String("http"),
			}),
		},
		{
			desc:     "Frontend entrypoints label set to http,https should return a string array of 2 elements",
			expected: []string{"http", "https"},
			instanceInfo: simpleEcsInstance(map[string]*string{
				label.TraefikFrontendEntryPoints: aws.String("http,https"),
			}),
		},
	}

	for _, test := range tests {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getFuncSliceString(label.TraefikFrontendEntryPoints)(test.instanceInfo)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func makeEcsInstance(containerDef *ecs.ContainerDefinition) ecsInstance {
	container := &ecs.Container{
		Name:            containerDef.Name,
		NetworkBindings: make([]*ecs.NetworkBinding, len(containerDef.PortMappings)),
	}

	for i, pm := range containerDef.PortMappings {
		container.NetworkBindings[i] = &ecs.NetworkBinding{
			HostPort:      pm.HostPort,
			ContainerPort: pm.ContainerPort,
			Protocol:      pm.Protocol,
			BindIP:        aws.String("0.0.0.0"),
		}
	}

	return ecsInstance{
		Name: "foo-http",
		ID:   "123456789abc",
		task: &ecs.Task{
			Containers: []*ecs.Container{container},
		},
		taskDefinition: &ecs.TaskDefinition{
			ContainerDefinitions: []*ecs.ContainerDefinition{containerDef},
		},
		container:           container,
		containerDefinition: containerDef,
		machine: &ec2.Instance{
			PrivateIpAddress: aws.String("10.0.0.0"),
			State: &ec2.InstanceState{
				Name: aws.String(ec2.InstanceStateNameRunning),
			},
		},
	}
}

func simpleEcsInstance(labels map[string]*string) ecsInstance {
	return makeEcsInstance(&ecs.ContainerDefinition{
		Name: aws.String("http"),
		PortMappings: []*ecs.PortMapping{{
			HostPort:      aws.Int64(80),
			ContainerPort: aws.Int64(80),
			Protocol:      aws.String("tcp"),
		}},
		DockerLabels: labels,
	})
}

func simpleEcsInstanceNoNetwork(labels map[string]*string) ecsInstance {
	return makeEcsInstance(&ecs.ContainerDefinition{
		Name:         aws.String("http"),
		PortMappings: []*ecs.PortMapping{},
		DockerLabels: labels,
	})
}

func TestGetCircuitBreaker(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.CircuitBreaker
	}{
		{
			desc: "should return nil when no CB label",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendCircuitBreakerExpression: aws.String("NetworkErrorRatio() > 0.5"),
					}}},
			expected: &types.CircuitBreaker{
				Expression: "NetworkErrorRatio() > 0.5",
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getCircuitBreaker(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetLoadBalancer(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.LoadBalancer
	}{
		{
			desc: "should return nil when no LB labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return a struct when labels are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendLoadBalancerMethod:               aws.String("drr"),
						label.TraefikBackendLoadBalancerSticky:               aws.String("true"),
						label.TraefikBackendLoadBalancerStickiness:           aws.String("true"),
						label.TraefikBackendLoadBalancerStickinessCookieName: aws.String("foo"),
					}}},
			expected: &types.LoadBalancer{
				Method: "drr",
				Sticky: true,
				Stickiness: &types.Stickiness{
					CookieName: "foo",
				},
			},
		},
		{
			desc: "should return a nil Stickiness when Stickiness is not set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendLoadBalancerMethod:               aws.String("drr"),
						label.TraefikBackendLoadBalancerSticky:               aws.String("true"),
						label.TraefikBackendLoadBalancerStickinessCookieName: aws.String("foo"),
					}}},
			expected: &types.LoadBalancer{
				Method:     "drr",
				Sticky:     true,
				Stickiness: nil,
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getLoadBalancer(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetMaxConn(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.MaxConn
	}{
		{
			desc: "should return nil when no max conn labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return nil when no amount label",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendMaxConnExtractorFunc: aws.String("client.ip"),
					}}},
			expected: nil,
		},
		{
			desc: "should return default when no empty extractorFunc label",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendMaxConnExtractorFunc: aws.String(""),
						label.TraefikBackendMaxConnAmount:        aws.String("666"),
					}}},
			expected: &types.MaxConn{
				ExtractorFunc: "request.host",
				Amount:        666,
			},
		},
		{
			desc: "should return a struct when max conn labels are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendMaxConnExtractorFunc: aws.String("client.ip"),
						label.TraefikBackendMaxConnAmount:        aws.String("666"),
					}}},
			expected: &types.MaxConn{
				ExtractorFunc: "client.ip",
				Amount:        666,
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getMaxConn(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetHealthCheck(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.HealthCheck
	}{
		{
			desc: "should return nil when no health check labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				}},
			expected: nil,
		},
		{
			desc: "should return nil when no health check Path label",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendHealthCheckPort:     aws.String("80"),
						label.TraefikBackendHealthCheckInterval: aws.String("6"),
					}}},
			expected: nil,
		},
		{
			desc: "should return a struct when health check labels are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendHealthCheckPath:     aws.String("/health"),
						label.TraefikBackendHealthCheckPort:     aws.String("80"),
						label.TraefikBackendHealthCheckInterval: aws.String("6"),
					}}},
			expected: &types.HealthCheck{
				Path:     "/health",
				Port:     80,
				Interval: "6",
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getHealthCheck(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetBuffering(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.Buffering
	}{
		{
			desc: "should return nil when no buffering labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				}},
			expected: nil,
		},
		{
			desc: "should return a struct when health check labels are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikBackendBufferingMaxResponseBodyBytes: aws.String("10485760"),
						label.TraefikBackendBufferingMemResponseBodyBytes: aws.String("2097152"),
						label.TraefikBackendBufferingMaxRequestBodyBytes:  aws.String("10485760"),
						label.TraefikBackendBufferingMemRequestBodyBytes:  aws.String("2097152"),
						label.TraefikBackendBufferingRetryExpression:      aws.String("IsNetworkError() && Attempts() <= 2"),
					}}},
			expected: &types.Buffering{
				MaxResponseBodyBytes: 10485760,
				MemResponseBodyBytes: 2097152,
				MaxRequestBodyBytes:  10485760,
				MemRequestBodyBytes:  2097152,
				RetryExpression:      "IsNetworkError() && Attempts() <= 2",
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getBuffering(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetServers(t *testing.T) {
	testCases := []struct {
		desc      string
		instances []ecsInstance
		expected  map[string]types.Server
	}{
		{
			desc: "should return a dumb server when no IP and no ",
			instances: []ecsInstance{{
				Name: "test",
				ID:   "0",
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
				machine: &ec2.Instance{
					PrivateIpAddress: nil,
				},
				container: &ecs.Container{
					NetworkBindings: []*ecs.NetworkBinding{{
						HostPort: nil,
					}},
				}}},
			expected: map[string]types.Server{
				"server-test-0": {URL: "http://:0", Weight: 0},
			},
		},
		{
			desc: "should use default weight when invalid weight value",
			instances: []ecsInstance{{
				Name: "test",
				ID:   "0",
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikWeight: aws.String("oops"),
					}},
				machine: &ec2.Instance{
					PrivateIpAddress: aws.String("10.10.10.0"),
				},
				container: &ecs.Container{
					NetworkBindings: []*ecs.NetworkBinding{{
						HostPort: aws.Int64(80),
					}},
				}}},
			expected: map[string]types.Server{
				"server-test-0": {URL: "http://10.10.10.0:80", Weight: 0},
			},
		},
		{
			desc: "should return a map when configuration keys are defined",
			instances: []ecsInstance{
				{
					Name: "test",
					ID:   "0",
					containerDefinition: &ecs.ContainerDefinition{
						DockerLabels: map[string]*string{
							label.TraefikWeight: aws.String("6"),
						}},
					machine: &ec2.Instance{
						PrivateIpAddress: aws.String("10.10.10.0"),
					},
					container: &ecs.Container{
						NetworkBindings: []*ecs.NetworkBinding{{
							HostPort: aws.Int64(80),
						}},
					}},
				{
					Name: "test",
					ID:   "1",
					containerDefinition: &ecs.ContainerDefinition{
						DockerLabels: map[string]*string{}},
					machine: &ec2.Instance{
						PrivateIpAddress: aws.String("10.10.10.1"),
					},
					container: &ecs.Container{
						NetworkBindings: []*ecs.NetworkBinding{{
							HostPort: aws.Int64(90),
						}},
					}},
			},
			expected: map[string]types.Server{
				"server-test-0": {
					URL:    "http://10.10.10.0:80",
					Weight: 6,
				},
				"server-test-1": {
					URL:    "http://10.10.10.1:90",
					Weight: 0,
				},
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getServers(test.instances)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestWhiteList(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.WhiteList
	}{
		{
			desc: "should return nil when no white list labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return a struct when only range",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendWhiteListSourceRange: aws.String("10.10.10.10"),
					}},
			},
			expected: &types.WhiteList{
				SourceRange: []string{
					"10.10.10.10",
				},
				UseXForwardedFor: false,
			},
		},
		{
			desc: "should return a struct when range and UseXForwardedFor",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendWhiteListSourceRange:      aws.String("10.10.10.10"),
						label.TraefikFrontendWhiteListUseXForwardedFor: aws.String("true"),
					}},
			},
			expected: &types.WhiteList{
				SourceRange: []string{
					"10.10.10.10",
				},
				UseXForwardedFor: true,
			},
		},
		{
			desc: "should return nil when only UseXForwardedFor",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendWhiteListUseXForwardedFor: aws.String("true"),
					}},
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getWhiteList(test.instance)
			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetRedirect(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.Redirect
	}{
		{
			desc: "should return nil when no redirect labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should use only entry point tag when mix regex redirect and entry point redirect",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRedirectEntryPoint:  aws.String("https"),
						label.TraefikFrontendRedirectRegex:       aws.String("(.*)"),
						label.TraefikFrontendRedirectReplacement: aws.String("$1"),
					}},
			},
			expected: &types.Redirect{
				EntryPoint: "https",
			},
		},
		{
			desc: "should return a struct when entry point redirect label",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRedirectEntryPoint: aws.String("https"),
					}},
			},
			expected: &types.Redirect{
				EntryPoint: "https",
			},
		},
		{
			desc: "should return a struct when entry point redirect label (permanent)",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRedirectEntryPoint: aws.String("https"),
						label.TraefikFrontendRedirectPermanent:  aws.String("true"),
					}},
			},
			expected: &types.Redirect{
				EntryPoint: "https",
				Permanent:  true,
			},
		},
		{
			desc: "should return a struct when regex redirect labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRedirectRegex:       aws.String("(.*)"),
						label.TraefikFrontendRedirectReplacement: aws.String("$1"),
					}},
			},
			expected: &types.Redirect{
				Regex:       "(.*)",
				Replacement: "$1",
			},
		},
		{
			desc: "should return a struct when regex redirect tags (permanent)",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRedirectRegex:       aws.String("(.*)"),
						label.TraefikFrontendRedirectReplacement: aws.String("$1"),
						label.TraefikFrontendRedirectPermanent:   aws.String("true"),
					}},
			},
			expected: &types.Redirect{
				Regex:       "(.*)",
				Replacement: "$1",
				Permanent:   true,
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getRedirect(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetErrorPages(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected map[string]*types.ErrorPage
	}{
		{
			desc: "",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "2 errors pages",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageStatus:  aws.String("404"),
						label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageBackend: aws.String("foo_backend"),
						label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageQuery:   aws.String("foo_query"),
						label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageStatus:  aws.String("500,600"),
						label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageBackend: aws.String("bar_backend"),
						label.Prefix + label.BaseFrontendErrorPage + "bar." + label.SuffixErrorPageQuery:   aws.String("bar_query"),
					}}},
			expected: map[string]*types.ErrorPage{
				"foo": {
					Status:  []string{"404"},
					Query:   "foo_query",
					Backend: "foo_backend",
				},
				"bar": {
					Status:  []string{"500", "600"},
					Query:   "bar_query",
					Backend: "bar_backend",
				},
			},
		},
		{
			desc: "only status field",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.Prefix + label.BaseFrontendErrorPage + "foo." + label.SuffixErrorPageStatus: aws.String("404"),
					}}},
			expected: map[string]*types.ErrorPage{
				"foo": {
					Status: []string{"404"},
				},
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getErrorPages(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetRateLimit(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.RateLimit
	}{
		{
			desc: "should return nil when no rate limit labels",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return a struct when rate limit labels are defined",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRateLimitExtractorFunc:                                        aws.String("client.ip"),
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitPeriod:  aws.String("6"),
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitAverage: aws.String("12"),
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitBurst:   aws.String("18"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitPeriod:  aws.String("3"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitAverage: aws.String("6"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitBurst:   aws.String("9"),
					},
				},
			},
			expected: &types.RateLimit{
				ExtractorFunc: "client.ip",
				RateSet: map[string]*types.Rate{
					"foo": {
						Period:  flaeg.Duration(6 * time.Second),
						Average: 12,
						Burst:   18,
					},
					"bar": {
						Period:  flaeg.Duration(3 * time.Second),
						Average: 6,
						Burst:   9,
					},
				},
			},
		},
		{
			desc: "should return nil when ExtractorFunc is missing",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitPeriod:  aws.String("6"),
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitAverage: aws.String("12"),
						label.Prefix + label.BaseFrontendRateLimit + "foo." + label.SuffixRateLimitBurst:   aws.String("18"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitPeriod:  aws.String("3"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitAverage: aws.String("6"),
						label.Prefix + label.BaseFrontendRateLimit + "bar." + label.SuffixRateLimitBurst:   aws.String("9"),
					},
				},
			},
			expected: nil,
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getRateLimit(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}

func TestGetHeaders(t *testing.T) {
	testCases := []struct {
		desc     string
		instance ecsInstance
		expected *types.Headers
	}{
		{
			desc: "",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return nil when no custom headers options are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{},
				},
			},
			expected: nil,
		},
		{
			desc: "should return a struct when all custom headers options are set",
			instance: ecsInstance{
				containerDefinition: &ecs.ContainerDefinition{
					DockerLabels: map[string]*string{
						label.TraefikFrontendRequestHeaders:          aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
						label.TraefikFrontendResponseHeaders:         aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
						label.TraefikFrontendSSLProxyHeaders:         aws.String("Access-Control-Allow-Methods:POST,GET,OPTIONS || Content-type: application/json; charset=utf-8"),
						label.TraefikFrontendAllowedHosts:            aws.String("foo,bar,bor"),
						label.TraefikFrontendHostsProxyHeaders:       aws.String("foo,bar,bor"),
						label.TraefikFrontendSSLHost:                 aws.String("foo"),
						label.TraefikFrontendCustomFrameOptionsValue: aws.String("foo"),
						label.TraefikFrontendContentSecurityPolicy:   aws.String("foo"),
						label.TraefikFrontendPublicKey:               aws.String("foo"),
						label.TraefikFrontendReferrerPolicy:          aws.String("foo"),
						label.TraefikFrontendCustomBrowserXSSValue:   aws.String("foo"),
						label.TraefikFrontendSTSSeconds:              aws.String("666"),
						label.TraefikFrontendSSLRedirect:             aws.String("true"),
						label.TraefikFrontendSSLTemporaryRedirect:    aws.String("true"),
						label.TraefikFrontendSTSIncludeSubdomains:    aws.String("true"),
						label.TraefikFrontendSTSPreload:              aws.String("true"),
						label.TraefikFrontendForceSTSHeader:          aws.String("true"),
						label.TraefikFrontendFrameDeny:               aws.String("true"),
						label.TraefikFrontendContentTypeNosniff:      aws.String("true"),
						label.TraefikFrontendBrowserXSSFilter:        aws.String("true"),
						label.TraefikFrontendIsDevelopment:           aws.String("true"),
					},
				},
			},
			expected: &types.Headers{
				CustomRequestHeaders: map[string]string{
					"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
					"Content-Type":                 "application/json; charset=utf-8",
				},
				CustomResponseHeaders: map[string]string{
					"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
					"Content-Type":                 "application/json; charset=utf-8",
				},
				SSLProxyHeaders: map[string]string{
					"Access-Control-Allow-Methods": "POST,GET,OPTIONS",
					"Content-Type":                 "application/json; charset=utf-8",
				},
				AllowedHosts:            []string{"foo", "bar", "bor"},
				HostsProxyHeaders:       []string{"foo", "bar", "bor"},
				SSLHost:                 "foo",
				CustomFrameOptionsValue: "foo",
				ContentSecurityPolicy:   "foo",
				PublicKey:               "foo",
				ReferrerPolicy:          "foo",
				CustomBrowserXSSValue:   "foo",
				STSSeconds:              666,
				SSLRedirect:             true,
				SSLTemporaryRedirect:    true,
				STSIncludeSubdomains:    true,
				STSPreload:              true,
				ForceSTSHeader:          true,
				FrameDeny:               true,
				ContentTypeNosniff:      true,
				BrowserXSSFilter:        true,
				IsDevelopment:           true,
			},
		},
	}

	for _, test := range testCases {
		test := test
		t.Run(test.desc, func(t *testing.T) {
			t.Parallel()

			actual := getHeaders(test.instance)

			assert.Equal(t, test.expected, actual)
		})
	}
}