1 files changed, 44 insertions, 0 deletions
diff --git a/test/system/271-tcp-cors-server.bats b/test/system/271-tcp-cors-server.bats
new file mode 100644
index 000000000..cdfa82e82
--- /dev/null
+++ b/test/system/271-tcp-cors-server.bats
@@ -0,0 +1,44 @@
+#!/usr/bin/env bats   -*- bats -*-
+#
+# Tests podman system service CORS enabled
+#
+
+load helpers
+
+SERVICE_NAME="podman_test_$(random_string)"
+
+SERVICE_TCP_HOST="localhost"
+
+SERVICE_FILE="$UNIT_DIR/$SERVICE_NAME.service"
+SOCKET_FILE="$UNIT_DIR/$SERVICE_NAME.socket"
+
+@test "podman system service - tcp CORS" {
+    skip_if_remote "system service tests are meaningless over remote"
+    PORT=$(( ((RANDOM<<15)|RANDOM) % 63001 + 2000 ))
+    run_podman system service --cors="*" tcp:$SERVICE_TCP_HOST:$PORT -t 20 &
+    podman_pid="$!"
+    sleep 5s
+    run curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping 2>&1
+    is "$output" ".*< Access-Control-Allow-Origin: \*.*" "access-control-allow-origin verifies CORS is set"
+    kill $podman_pid
+    wait $podman_pid || true
+}
+
+@test "podman system service - tcp without CORS" {
+    skip_if_remote "system service tests are meaningless over remote"
+    PORT=$(( ((RANDOM<<15)|RANDOM) % 63001 + 2000 ))
+    run_podman system service tcp:$SERVICE_TCP_HOST:$PORT -t 20 &
+    podman_pid="$!"
+    sleep 5s
+    (curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping 2>&1 | grep -Eq "Access-Control-Allow-Origin:") && false || true
+    kill $podman_pid
+    wait $podman_pid || true
+}
+
+@test "podman system service - CORS enabled in logs" {
+    skip_if_remote "system service tests are meaningless over remote"
+    run_podman system service --log-level="debug" --cors="*" -t 1
+    is "$output" ".*CORS Headers were set to \*.*" "debug log confirms CORS headers set"
+}
+
+# vim: filetype=sh